<commit_before># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/FewAtoms/status/1068521076441804800
# Reference: https://securelist.com/hajime-the-mysterious-evolving-botnet/78160/

172.16.31.10:49320
192.168.3.11:52672
172.16.31.10:44977
172.16.58.3:45322
192.168.3.11:45594

# Reference: https://twitter.com/bad_packets/status/1219432997931208705

172.16.17.32:27499
172.16.58.3:22123
192.168.127.12:45100
172.16.17.32:56220
172.16.17.32:11201
192.168.127.12:47069
192.168.127.12:51296
172.16.17.32:20705

# Reference: https://twitter.com/bad_packets/status/1232389597432172544

172.16.31.10:1662
172.16.17.32:44578
192.168.3.11:6909
172.16.31.10:13351
192.168.3.11:26006

# Reference: https://twitter.com/JayTHL/status/1234495398854766593

192.168.3.11:39245
172.16.17.32:48831

# Reference: https://twitter.com/bad_packets/status/1234561098327580674

172.16.58.3:17921
172.16.17.32:11774
172.16.31.10:64951
172.16.58.3:62726
192.168.127.12:1297
192.168.3.11:48098

# Reference: https://twitter.com/JayTHL/status/1235222147754274816

172.16.31.10:51954

# Reference: https://twitter.com/bad_packets/status/1235411180484587522

192.168.3.11:20850
192.168.3.11:29815
172.16.58.3:46687
172.16.58.3:55738
172.16.17.32:15120
192.168.127.12:42666

# Reference: https://twitter.com/JayTHL/status/1235579301958946816

172.16.31.10:59213

# Reference: https://twitter.com/bad_packets/status/1236552680354406402

172.16.58.3:26436
192.168.127.12:16921
172.16.17.32:1843
192.168.127.12:45725
192.168.3.11:27931
172.16.17.32:28901

# Reference: https://twitter.com/bad_packets/status/1238351961201602560

192.168.127.12:59316
172.16.58.3:58493
192.168.3.11:7856
172.16.58.3:53541
192.168.3.11:48702
192.168.3.11:55951

# Reference: https://twitter.com/malwaremustd1e/status/1239577258387365888
# Reference: https://blog.malwaremustdie.org/2014/09/linux-elf-bash-0day-fun-has-only-just.html

192.168.127.12:4545
0rz.it<commit_msg>Update elf_hajime.txt<commit_after># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/FewAtoms/status/1068521076441804800
# Reference: https://securelist.com/hajime-the-mysterious-evolving-botnet/78160/

172.16.31.10:49320
192.168.3.11:52672
172.16.31.10:44977
172.16.58.3:45322
192.168.3.11:45594

# Reference: https://twitter.com/bad_packets/status/1219432997931208705

172.16.17.32:27499
172.16.58.3:22123
192.168.127.12:45100
172.16.17.32:56220
172.16.17.32:11201
192.168.127.12:47069
192.168.127.12:51296
172.16.17.32:20705

# Reference: https://twitter.com/bad_packets/status/1232389597432172544

172.16.31.10:1662
172.16.17.32:44578
192.168.3.11:6909
172.16.31.10:13351
192.168.3.11:26006

# Reference: https://twitter.com/JayTHL/status/1234495398854766593

192.168.3.11:39245
172.16.17.32:48831

# Reference: https://twitter.com/bad_packets/status/1234561098327580674

172.16.58.3:17921
172.16.17.32:11774
172.16.31.10:64951
172.16.58.3:62726
192.168.127.12:1297
192.168.3.11:48098

# Reference: https://twitter.com/JayTHL/status/1235222147754274816

172.16.31.10:51954

# Reference: https://twitter.com/bad_packets/status/1235411180484587522

192.168.3.11:20850
192.168.3.11:29815
172.16.58.3:46687
172.16.58.3:55738
172.16.17.32:15120
192.168.127.12:42666

# Reference: https://twitter.com/JayTHL/status/1235579301958946816

172.16.31.10:59213

# Reference: https://twitter.com/bad_packets/status/1236552680354406402

172.16.58.3:26436
192.168.127.12:16921
172.16.17.32:1843
192.168.127.12:45725
192.168.3.11:27931
172.16.17.32:28901

# Reference: https://twitter.com/bad_packets/status/1238351961201602560

192.168.127.12:59316
172.16.58.3:58493
192.168.3.11:7856
172.16.58.3:53541
192.168.3.11:48702
192.168.3.11:55951

# Reference: https://twitter.com/malwaremustd1e/status/1239577258387365888
# Reference: https://blog.malwaremustdie.org/2014/09/linux-elf-bash-0day-fun-has-only-just.html

192.168.127.12:4545
0rz.it

# Reference: https://twitter.com/bad_packets/status/1242838442754498560

172.16.58.3:50030
172.16.17.32:35251
172.16.58.3:4723
192.168.3.11:17542
172.16.58.3:58050
172.16.58.3:45381
{'fraction_non_alphanumeric': 0.16631529632232372, 'fraction_numerical': 0.4408526587022722, 'mean_word_length': 4.5890052356020945, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 29, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 100, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5308342', 'n_tokens_mistral': 3055, 'n_tokens_neox': 1962, 'n_words': 184}