# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.liceonaval.mil.ec/imagenes/zak.c

/busybotnet
/busyboxterrorist
/dvrHelper
/gaybot
/hackmyarmv4
/hackmyarmv4tl
/hackmyarmv5
/hackmyarmv6
/hackmyi586
/hackmyi686
/hackmym68k
/hackmymips
/hackmymips64
/hackmymipsel
/hackmypowerpc
/hackmypowerpc440fp
/hackmysh2eb
/hackmysh2elf
/hackmysh4
/hackmysparc
/hackmyx86
/hackmyx86_64
/jackmyarmv4
/jackmyarmv4tl
/jackmyarmv5
/jackmyarmv6
/jackmyi586
/jackmyi686
/jackmym68k
/jackmymips
/jackmymips64
/jackmymipsel
/jackmypowerpc
/jackmypowerpc440fp
/jackmysh2eb
/jackmysh2elf
/jackmysh4
/jackmysparc
/jackmyx86
/jackmyx86_64
/kmyarmv4
/kmyarmv4tl
/kmyarmv5
/kmyarmv6
/kmyi586
/kmyi686
/kmym68k
/kmymips
/kmymips64
/kmymipsel
/kmypowerpc
/kmypowerpc440fp
/kmysh2eb
/kmysh2elf
/kmysh4
/kmysparc
/kmyx86
/kmyx86_64
/lolarmv4
/lolarmv4tl
/lolarmv5
/lolarmv6
/loli586
/loli686
/lolm68k
/lolmips
/lolmips64
/lolmipsel
/lolpowerpc
/lolpowerpc440fp
/lolsh2eb
/lolsh2elf
/lolsh4
/lolsparc
/lolx86
/telarmv4
/telarmv4tl
/telarmv5
/telarmv6
/teli586
/teli686
/telm68k
/telmips
/telmips64
/telmipsel
/telpowerpc
/telpowerpc440fp
/telsh2eb
/telsh2elf
/telsh4
/telsparc
/telx86
/telx86_64
/TwoFacearmv4
/TwoFacearmv4tl
/TwoFacearmv5
/TwoFacearmv6
/TwoFacei586
/TwoFacei686
/TwoFacem68k
/TwoFacemips
/TwoFacemips64
/TwoFacemipsel
/TwoFacepowerpc
/TwoFacepowerpc440fp
/TwoFacesh2eb
/TwoFacesh2elf
/TwoFacesh4
/TwoFacesparc
/TwoFacex86
/TwoFacex86_64

# Reference: https://www.virustotal.com/en/file/e0120fc5544f9bc73f88ce4fbc8ba2c80cda73ab09a6092f84e5a77b07abb1d3/analysis/

/cuntybash

# Reference: https://www.virustotal.com/en/ip-address/217.28.218.227/information/

/dingarm
/dingcurl.sh
/dingdong.sh
/dingi686
/dingmips
/dingmips64
/dingmipsel
/dingppc
/dingsh4
/dingsparc
/dingx64

# Reference: https://www.virustotal.com/en/file/1d3737937d900aab31f2e1acabfb861ffa2a7d11040e67f408d608150cfa6d8c/analysis/

/xlegal1
/xlegal2
/xlegal3
/xlegal4
/xlegal5
/xlegal6
/xlegal7
/xlegal8

# Reference: https://www.virustotal.com/en/file/f25f507d7ad9e388a41f55a22a9a5f8b5782d9af3f1ca0a34aa117be2ac37e4f/analysis/

/IoTarmv4
/IoTarmv5
/IoTi686
/IoTm68k
/IoTmips
/IoTmips64
/IoTpowerpc
/IoTsh4
/IoTsparc
/IoTx86

# Reference: https://twitter.com/bad_packets/status/1049413363447394304
# Reference: https://twitter.com/bad_packets/status/1116745238507167744

/EREBUS
/EREBUS.sh
/EREBUS1
/EREBUS2
/EREBUS3
/EREBUS4
/EREBUS5
/EREBUS6
/EREBUS7
/EREBUS8
/EREBUS9
/EREBUS10

# Reference: https://twitter.com/bad_packets/status/1105236847280611328
# Reference: https://twitter.com/bad_packets/status/1104858504219639808

/Alma.arc
/Alma.arm
/Alma.arm4
/Alma.arm4l
/Alma.arm4t
/Alma.armv4l
/Alma.arm5
/Alma.arm5n
/Alma.arm6
/Alma.arm7
/Alma.dbg
/Alma.i486
/Alma.i586
/Alma.i686
/Alma.m68k
/Alma.mips
/Alma.mips64
/Alma.mpsl
/Alma.ppc
/Alma.ppc440
/Alma.root
/Alma.sh
/Alma.sh4
/Alma.spc
/Alma.sparc
/Alma.x32
/Alma.x64
/Alma.x86
/Alma.x86_32
/Alma.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1097260292109549568

/ajoomk
/atxhua
/cemtop
/earyzq
/fwdfvf
/lnkfmx
/nvitpj
/qtmzbn
/qvmxvl
/razdzn
/vtyhat
/vvglma

# Reference: https://twitter.com/MalwarePatrol/status/1114572992879656960
# Reference: https://www.virustotal.com/gui/file/eec1f090ea0f9eb42233792ddefa8a6f57a17a13cd08cf40ff69a17303adb43e/community

/assailant.arc
/assailant.arm
/assailant.arm4
/assailant.arm4l
/assailant.arm4t
/assailant.armv4l
/assailant.arm5
/assailant.arm5n
/assailant.arm6
/assailant.arm7
/assailant.dbg
/assailant.i486
/assailant.i586
/assailant.i686
/assailant.m68k
/assailant.mips
/assailant.mips64
/assailant.mpsl
/assailant.ppc
/assailant.ppc440
/assailant.powerppc
/assailant.root
/assailant.sh
/assailant.sh4
/assailant.spc
/assailant.sparc
/assailant.x32
/assailant.x64
/assailant.x86
/assailant.x86_32
/assailant.x86_64

# Reference: https://twitter.com/0xrb/status/1106501118220070912

/xyt4arc
/xyt4arm
/xyt4arm4
/xyt4arm4l
/xyt4arm4t
/xyt4armv4l
/xyt4arm5
/xyt4arm5n
/xyt4arm6
/xyt4arm7
/xyt4dbg
/xyt4i486
/xyt4i586
/xyt4i686
/xyt4m68k
/xyt4mips
/xyt4mips64
/xyt4mpsl
/xyt4ppc
/xyt4ppc440
/xyt4powerppc
/xyt4root
/xyt4sh
/xyt4sh4
/xyt4spc
/xyt4sparc
/xyt4x32
/xyt4x64
/xyt4x86
/xyt4x86_32
/xyt4x86_64

# Reference: https://twitter.com/0xrb/status/1102405214001397760

/JapaneseSpace.arc
/JapaneseSpace.arm
/JapaneseSpace.arm4
/JapaneseSpace.arm4l
/JapaneseSpace.arm4t
/JapaneseSpace.armv4l
/JapaneseSpace.arm5
/JapaneseSpace.arm5n
/JapaneseSpace.arm6
/JapaneseSpace.arm7
/JapaneseSpace.dbg
/JapaneseSpace.i486
/JapaneseSpace.i586
/JapaneseSpace.i686
/JapaneseSpace.m68k
/JapaneseSpace.mips
/JapaneseSpace.mips64
/JapaneseSpace.mpsl
/JapaneseSpace.ppc
/JapaneseSpace.ppc440
/JapaneseSpace.powerppc
/JapaneseSpace.root
/JapaneseSpace.sh
/JapaneseSpace.sh4
/JapaneseSpace.spc
/JapaneseSpace.sparc
/JapaneseSpace.x32
/JapaneseSpace.x64
/JapaneseSpace.x86
/JapaneseSpace.x86_32
/JapaneseSpace.x86_64

# Reference: https://twitter.com/0xrb/status/1099899224332763136

/tenshiarc
/tenshiarm
/tenshiarm4
/tenshiarm4l
/tenshiarm4t
/tenshiarmv4l
/tenshiarm5
/tenshiarm5n
/tenshiarm6
/tenshiarm7
/tenshidbg
/tenshii486
/tenshii586
/tenshii686
/tenshim68k
/tenshimips
/tenshimips64
/tenshimpsl
/tenshippc
/tenshippc440
/tenshipowerppc
/tenshiroot
/tenshish
/tenshish4
/tenshispc
/tenshisparc
/tenshix32
/tenshix64
/tenshix86
/tenshix86_32
/tenshix86_64

# Reference: https://twitter.com/0xrb/status/1098874627617579008

/dead.arc
/dead.arm
/dead.arm4
/dead.arm4l
/dead.arm4t
/dead.armv4l
/dead.arm5
/dead.arm5n
/dead.arm6
/dead.arm7
/dead.dbg
/dead.i486
/dead.i586
/dead.i686
/dead.m68k
/dead.mips
/dead.mips64
/dead.mpsl
/dead.ppc
/dead.ppc440
/dead.powerppc
/dead.root
/dead.sh
/dead.sh4
/dead.spc
/dead.sparc
/dead.x32
/dead.x64
/dead.x86
/dead.x86_32
/dead.x86_64

# Reference: https://twitter.com/0xrb/status/1098514933774352389

/pl0xarc
/pl0xarm
/pl0xarm4
/pl0xarm4l
/pl0xarm4t
/pl0xarmv4l
/pl0xarm5
/pl0xarm5n
/pl0xarm6
/pl0xarm7
/pl0xdbg
/pl0xi486
/pl0xi586
/pl0xi686
/pl0xm68k
/pl0xmips
/pl0xmips64
/pl0xmpsl
/pl0xppc
/pl0xppc440
/pl0xpowerppc
/pl0xroot
/pl0xsh
/pl0xsh4
/pl0xspc
/pl0xsparc
/pl0xx32
/pl0xx64
/pl0xx86
/pl0xx86_32
/pl0xx86_64
/kittyphones

# Reference: https://twitter.com/0xrb/status/1098513464480264192

/hikari.arc
/hikari.arm
/hikari.arm4
/hikari.arm4l
/hikari.arm4t
/hikari.armv4l
/hikari.arm5
/hikari.arm5n
/hikari.arm6
/hikari.arm7
/hikari.dbg
/hikari.i486
/hikari.i586
/hikari.i686
/hikari.m68k
/hikari.mips
/hikari.mips64
/hikari.mpsl
/hikari.ppc
/hikari.ppc440
/hikari.powerppc
/hikari.root
/hikari.sh
/hikari.sh4
/hikari.spc
/hikari.sparc
/hikari.x32
/hikari.x64
/hikari.x86
/hikari.x86_32
/hikari.x86_64

# Reference: https://twitter.com/0xrb/status/1098456930127831050

/op.arc
/op.arm
/op.arm4
/op.arm4l
/op.arm4t
/op.arm4tl
/op.armv4l
/op.arm5
/op.arm5n
/op.arm6
/op.arm7
/op.dbg
/op.i486
/op.i586
/op.i686
/op.m68k
/op.mips
/op.mips64
/op.mpsl
/op.ppc
/op.ppc440
/op.powerppc
/op.root
/op.sh
/op.sh4
/op.spc
/op.sparc
/op.x32
/op.x64
/op.x86
/op.x86_32
/op.x86_64

# Reference: https://twitter.com/0xrb/status/1097865113716117508
# Reference: https://twitter.com/0xrb/status/1095736854593368065

/gang
/fgd

# Reference: https://twitter.com/0xrb/status/1097810508537888769

/hakka.arc
/hakka.arm
/hakka.arm4
/hakka.arm4l
/hakka.arm4t
/hakka.arm4tl
/hakka.armv4l
/hakka.arm5
/hakka.arm5n
/hakka.arm6
/hakka.arm7
/hakka.dbg
/hakka.i486
/hakka.i586
/hakka.i686
/hakka.m68k
/hakka.mips
/hakka.mips64
/hakka.mpsl
/hakka.ppc
/hakka.ppc440
/hakka.powerppc
/hakka.root
/hakka.sh
/hakka.sh4
/hakka.spc
/hakka.sparc
/hakka.x32
/hakka.x64
/hakka.x86
/hakka.x86_32
/hakka.x86_64

# Reference: https://twitter.com/0xrb/status/1097798750976856064

/Arbiter.arc
/Arbiter.arm
/Arbiter.arm4
/Arbiter.arm4l
/Arbiter.arm4t
/Arbiter.arm4tl
/Arbiter.armv4l
/Arbiter.arm5
/Arbiter.arm5n
/Arbiter.arm6
/Arbiter.arm7
/Arbiter.dbg
/Arbiter.i486
/Arbiter.i586
/Arbiter.i686
/Arbiter.m68k
/Arbiter.mips
/Arbiter.mips64
/Arbiter.mpsl
/Arbiter.ppc
/Arbiter.ppc440
/Arbiter.powerppc
/Arbiter.root
/Arbiter.sh
/Arbiter.sh4
/Arbiter.spc
/Arbiter.sparc
/Arbiter.x32
/Arbiter.x64
/Arbiter.x86
/Arbiter.x86_32
/Arbiter.x86_64

# Reference: https://twitter.com/0xrb/status/1097071201065816064

/cnc.arc
/cnc.arm
/cnc.arm4
/cnc.arm4l
/cnc.arm4t
/cnc.arm4tl
/cnc.armv4l
/cnc.arm5
/cnc.arm5n
/cnc.arm6
/cnc.arm7
/cnc.dbg
/cnc.i486
/cnc.i586
/cnc.i686
/cnc.m68k
/cnc.mips
/cnc.mips64
/cnc.mpsl
/cnc.ppc
/cnc.ppc440
/cnc.powerppc
/cnc.root
/cnc.sh
/cnc.sh4
/cnc.spc
/cnc.sparc
/cnc.x32
/cnc.x64
/cnc.x86
/cnc.x86_32
/cnc.x86_64

# Reference: https://twitter.com/0xrb/status/1095339881427922945

/MG.arc
/MG.arm
/MG.arm4
/MG.arm4l
/MG.arm4t
/MG.armv4l
/MG.arm5
/MG.arm5n
/MG.arm6
/MG.arm7
/MG.dbg
/MG.i486
/MG.i586
/MG.i686
/MG.m68k
/MG.mips
/MG.mips64
/MG.mpsl
/MG.ppc
/MG.ppc440
/MG.powerppc
/MG.root
/MG.sh
/MG.sh4
/MG.spc
/MG.sparc
/MG.x32
/MG.x64
/MG.x86
/MG.x86_32
/MG.x86_64

# Reference: https://twitter.com/0xrb/status/1094893674268262400

/hehe.arc
/hehe.arm
/hehe.arm4
/hehe.arm4l
/hehe.arm4t
/hehe.arm4tl
/hehe.armv4l
/hehe.arm5
/hehe.arm5n
/hehe.arm6
/hehe.arm7
/hehe.dbg
/hehe.i486
/hehe.i586
/hehe.i686
/hehe.m68k
/hehe.mips
/hehe.mips64
/hehe.mpsl
/hehe.ppc
/hehe.ppc440
/hehe.powerppc
/hehe.root
/hehe.sh
/hehe.sh4
/hehe.spc
/hehe.sparc
/hehe.x32
/hehe.x64
/hehe.x86
/hehe.x86_32
/hehe.x86_64

# Reference: https://twitter.com/0xrb/status/1094629583473786882

/lol.arc
/lol.arm
/lol.arm4
/lol.arm4l
/lol.arm4t
/lol.arm4tl
/lol.armv4l
/lol.arm5
/lol.arm5n
/lol.arm6
/lol.arm7
/lol.dbg
/lol.i486
/lol.i586
/lol.i686
/lol.m68k
/lol.mips
/lol.mips64
/lol.mpsl
/lol.ppc
/lol.ppc440
/lol.powerppc
/lol.root
/lol.sh
/lol.sh4
/lol.spc
/lol.sparc
/lol.x32
/lol.x64
/lol.x86
/lol.x86_32
/lol.x86_64

# Reference: https://twitter.com/0xrb/status/1094078897128382465

/fuck.arc
/fuck.arm
/fuck.arm4
/fuck.arm4l
/fuck.arm4t
/fuck.arm4tl
/fuck.armv4l
/fuck.arm5
/fuck.arm5n
/fuck.arm6
/fuck.arm7
/fuck.dbg
/fuck.i486
/fuck.i586
/fuck.i686
/fuck.m68k
/fuck.mips
/fuck.mips64
/fuck.mpsl
/fuck.ppc
/fuck.ppc440
/fuck.powerppc
/fuck.root
/fuck.sh
/fuck.sh4
/fuck.spc
/fuck.sparc
/fuck.x32
/fuck.x64
/fuck.x86
/fuck.x86_32
/fuck.x86_64

# Reference: https://twitter.com/0xrb/status/1094073635755773953

/Execution.arc
/Execution.arm
/Execution.arm4
/Execution.arm4l
/Execution.arm4t
/Execution.arm4tl
/Execution.armv4l
/Execution.arm5
/Execution.arm5n
/Execution.arm6
/Execution.arm7
/Execution.dbg
/Execution.i486
/Execution.i586
/Execution.i686
/Execution.m68k
/Execution.mips
/Execution.mips64
/Execution.mpsl
/Execution.ppc
/Execution.ppc440
/Execution.powerppc
/Execution.root
/Execution.sh
/Execution.sh4
/Execution.spc
/Execution.sparc
/Execution.x32
/Execution.x64
/Execution.x86
/Execution.x86_32
/Execution.x86_64

# Reference: https://twitter.com/0xrb/status/1093212457873608705

/unk
/unk1
/unk10
/unk2
/unk3
/unk4
/unk5
/unk6
/unk7
/unk8
/unk9

# Reference: https://twitter.com/0xrb/status/1091541952607207425

/k_arc
/k_arm
/k_arm4
/k_armv4l
/k_arm5
/k_arm5n
/k_armv5l
/k_arm6
/k_arm7
/k_armv7l
/k_dbg
/k_i486
/k_i586
/k_i686
/k_m68k
/k_mips
/k_mips64
/k_mpsl
/k_ppc
/k_powerpc-440fp
/k_sh4
/k_spc
/k_sparc
/k_x32
/k_x64
/k_x86_64

# Reference: https://twitter.com/0xrb/status/1090548183267139590

/mipss
/mipsell
/sshm8
/x86wtf
/arm66
/arm62
/ppcp
/ar58
/mk2
/sparcc
/arm44
/arm55
/ppc2

# Reference: https://twitter.com/0xrb/status/1090122108615544832

/DankyDanky.arc
/DankyDanky.arm
/DankyDanky.arm4
/DankyDanky.arm4l
/DankyDanky.arm4t
/DankyDanky.arm4tl
/DankyDanky.armv4l
/DankyDanky.arm5
/DankyDanky.arm5n
/DankyDanky.arm6
/DankyDanky.arm7
/DankyDanky.dbg
/DankyDanky.i486
/DankyDanky.i586
/DankyDanky.i686
/DankyDanky.m68k
/DankyDanky.mips
/DankyDanky.mips64
/DankyDanky.mpsl
/DankyDanky.ppc
/DankyDanky.ppc440
/DankyDanky.powerppc
/DankyDanky.root
/DankyDanky.sh
/DankyDanky.sh4
/DankyDanky.spc
/DankyDanky.sparc
/DankyDanky.x32
/DankyDanky.x64
/DankyDanky.x86
/DankyDanky.x86_32
/DankyDanky.x86_64

# Reference: https://twitter.com/0xrb/status/1090115672095354880

/Voltage.arc
/Voltage.arm
/Voltage.arm4
/Voltage.arm4l
/Voltage.arm4t
/Voltage.arm4tl
/Voltage.armv4l
/Voltage.arm5
/Voltage.arm5n
/Voltage.arm6
/Voltage.arm7
/Voltage.dbg
/Voltage.i486
/Voltage.i586
/Voltage.i686
/Voltage.m68k
/Voltage.mips
/Voltage.mips64
/Voltage.mpsl
/Voltage.ppc
/Voltage.ppc440
/Voltage.powerppc
/Voltage.root
/Voltage.sh
/Voltage.sh4
/Voltage.spc
/Voltage.sparc
/Voltage.x32
/Voltage.x64
/Voltage.x86
/Voltage.x86_32
/Voltage.x86_64

# Reference: https://twitter.com/0xrb/status/1089767658566803456

/seize.arc
/seize.arm
/seize.arm4
/seize.arm4l
/seize.arm4t
/seize.arm4tl
/seize.armv4l
/seize.arm5
/seize.arm5n
/seize.arm6
/seize.arm7
/seize.dbg
/seize.i486
/seize.i586
/seize.i686
/seize.m68k
/seize.mips
/seize.mips64
/seize.mpsl
/seize.ppc
/seize.ppc440
/seize.powerppc
/seize.root
/seize.sh
/seize.sh4
/seize.spc
/seize.sparc
/seize.x32
/seize.x64
/seize.x86
/seize.x86_32
/seize.x86_64

# Reference: https://twitter.com/malwaremustd1e/status/1089384555859996672

kaiten.do-dear.com

# Reference: https://twitter.com/0xrb/status/1089192080814026752

/rozxw.arc
/rozxw.arm
/rozxw.arm4
/rozxw.arm4l
/rozxw.arm4t
/rozxw.arm4tl
/rozxw.armv4l
/rozxw.arm5
/rozxw.arm5n
/rozxw.arm6
/rozxw.arm7
/rozxw.dbg
/rozxw.i486
/rozxw.i586
/rozxw.i686
/rozxw.m68k
/rozxw.mips
/rozxw.mips64
/rozxw.mpsl
/rozxw.ppc
/rozxw.ppc440
/rozxw.powerppc
/rozxw.root
/rozxw.sh
/rozxw.sh4
/rozxw.spc
/rozxw.sparc
/rozxw.x32
/rozxw.x64
/rozxw.x86
/rozxw.x86_32
/rozxw.x86_64
/rozxw.apache2
/rozxw.fuck
/rozxw.telnetd

# Reference: https://twitter.com/0xrb/status/1088508079526817792

/etherial.arc
/etherial.arm
/etherial.arm4
/etherial.arm4l
/etherial.arm4t
/etherial.arm4tl
/etherial.armv4l
/etherial.arm5
/etherial.arm5n
/etherial.arm6
/etherial.arm7
/etherial.dbg
/etherial.i486
/etherial.i586
/etherial.i686
/etherial.m68k
/etherial.mips
/etherial.mips64
/etherial.mpsl
/etherial.ppc
/etherial.ppc440
/etherial.powerppc
/etherial.root
/etherial.sh
/etherial.sh4
/etherial.spc
/etherial.sparc
/etherial.x32
/etherial.x64
/etherial.x86
/etherial.x86_32
/etherial.x86_64

# Reference: https://twitter.com/0xrb/status/1097775066077642753

/adb1
/adb10
/adb2
/adb3
/adb4
/adb5
/adb6
/adb7
/adb8
/adb9
/dlink2
/tr064
/tr0642
/gpon801
/gpon802
/gpon803
/gpon804
/gpon805
/gpon806
/gpon807
/gpon808
/gpon809
/gpon4431
/gpon4432
/gpon4433
/gpon4434
/gpon4435
/gpon4436
/gpon4437
/gpon4438
/gpon4439
/gpon44310
/gpon8010
/gpon80801
/gpon80802
/gpon80803
/gpon80804
/gpon80805
/gpon80806
/gpon80807
/gpon80808
/gpon80809
/gpon808010

# Reference: https://twitter.com/0xrb/status/1114204138936647680

80.211.232.121:35883

# Reference: https://twitter.com/0xrb/status/1107530673319903235

/lelznet.sh

# Reference: https://twitter.com/0xrb/status/1119301515766915072

/tru.arc
/tru.arm
/tru.arm4
/tru.arm4l
/tru.arm4t
/tru.arm4tl
/tru.armv4l
/tru.arm5
/tru.arm5n
/tru.arm6
/tru.arm7
/tru.dbg
/tru.i486
/tru.i586
/tru.i686
/tru.m68k
/tru.mips
/tru.mips64
/tru.mpsl
/tru.ppc
/tru.ppc440
/tru.powerppc
/tru.root
/tru.sh
/tru.sh4
/tru.spc
/tru.sparc
/tru.x32
/tru.x64
/tru.x86
/tru.x86_32
/tru.x86_64

# Reference: https://twitter.com/0xrb/status/1119476880032391173

/samoura.arc
/samoura.arm
/samoura.arm4
/samoura.arm4l
/samoura.arm4t
/samoura.arm4tl
/samoura.armv4l
/samoura.arm5
/samoura.arm5n
/samoura.arm6
/samoura.arm7
/samoura.dbg
/samoura.i486
/samoura.i586
/samoura.i686
/samoura.m68k
/samoura.mips
/samoura.mips64
/samoura.mpsl
/samoura.ppc
/samoura.ppc440
/samoura.powerppc
/samoura.root
/samoura.sh
/samoura.sh4
/samoura.spc
/samoura.sparc
/samoura.x32
/samoura.x64
/samoura.x86
/samoura.x86_32
/samoura.x86_64

# Reference: https://twitter.com/bad_packets/status/1119746530309595136

/doink.arc
/doink.arm
/doink.arm4
/doink.arm4l
/doink.arm4t
/doink.arm4tl
/doink.armv4l
/doink.arm5
/doink.arm5n
/doink.arm6
/doink.arm7
/doink.dbg
/doink.i486
/doink.i586
/doink.i686
/doink.m68k
/doink.mips
/doink.mips64
/doink.mpsl
/doink.ppc
/doink.ppc440
/doink.powerppc
/doink.root
/doink.sh
/doink.sh4
/doink.spc
/doink.sparc
/doink.x32
/doink.x64
/doink.x86
/doink.x86_32
/doink.x86_64

# Reference: https://twitter.com/0xrb/status/1122062589251309568

/Sinix.arc
/Sinix.arm
/Sinix.arm4
/Sinix.arm4l
/Sinix.arm4t
/Sinix.arm4tl
/Sinix.armv4l
/Sinix.arm5
/Sinix.arm5n
/Sinix.arm6
/Sinix.arm7
/Sinix.dbg
/Sinix.i486
/Sinix.i586
/Sinix.i686
/Sinix.m68k
/Sinix.mips
/Sinix.mips64
/Sinix.mpsl
/Sinix.ppc
/Sinix.ppc440
/Sinix.ppc440fp
/Sinix.powerppc
/Sinix.root
/Sinix.sh
/Sinix.sh4
/Sinix.spc
/Sinix.sparc
/Sinix.x32
/Sinix.x64
/Sinix.x86
/Sinix.x86_32
/Sinix.x86_64
1.188.10.122:23
1.188.112.132:23
1.188.12.1:23
1.188.135.22:23
1.188.14.207:23
1.188.152.16:23
1.188.157.106:23
1.188.169.105:23
1.188.169.225:23
1.188.17.88:23

# Reference: https://twitter.com/0xrb/status/1122072569853571073

/leet.arc
/leet.arm
/leet.arm4
/leet.arm4l
/leet.arm4t
/leet.arm4tl
/leet.armv4l
/leet.arm5
/leet.arm5n
/leet.arm6
/leet.arm7
/leet.dbg
/leet.i486
/leet.i586
/leet.i686
/leet.m68k
/leet.mips
/leet.mips64
/leet.mpsl
/leet.ppc
/leet.ppc440
/leet.powerppc
/leet.root
/leet.sh
/leet.sh4
/leet.spc
/leet.sparc
/leet.x32
/leet.x64
/leet.x86
/leet.x86_32
/leet.x86_64
103.60.13.195:1337

# Reference: https://twitter.com/gorimpthon/status/1073832584709357568

/weed.sh
/weedntpd
/weedsshd
/weedopenssh
/weedbash
/weedtftp
/weedwget
/weedcron
/weedftp
/weedpftp
/weedsh
/weedshit
/weedapache2
/weedtelnetd
