<commit_before># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/James_inthe_box/status/1144626442304552960

192.168.3.11:443

# Reference: https://twitter.com/PRODAFT/status/1139419259816124416

http://172.16.31.10

# Reference: https://twitter.com/PRODAFT/status/1104782941547192320

172.16.58.3:8070

# Reference: https://twitter.com/James_inthe_box/status/1088774712233058306

172.16.58.3:443

# Reference: https://twitter.com/James_inthe_box/status/1039936854345150464

192.168.127.12:77

# Reference: https://twitter.com/James_inthe_box/status/1148652274727575558

sertacio12.com

# Reference: https://twitter.com/James_inthe_box/status/1159861664960749569

172.16.58.3:443

# Reference: https://twitter.com/VK_Intel/status/1161493315134603265

172.16.31.10:81

# Reference: https://twitter.com/DynamicAnalysis/status/1223303076100169730

leaben.pw

# Reference: https://twitter.com/James_inthe_box/status/1223307741877297157

buhjike.host

# Reference: https://twitter.com/VK_Intel/status/1224327255104446464
# Referfence: https://www.virustotal.com/gui/file/df2bea2c7d1f9f2a27a62e291cff41e1b3ec677014c98048e82301cd10d36493/detection

192.168.127.12:5010

# Reference: https://twitter.com/DynamicAnalysis/status/1224787828351098880

brewaz.club
zulutwit.site

# Generic

/error_faust.php
/milagrecf.php<commit_msg>Update hvncrat.txt<commit_after># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/James_inthe_box/status/1144626442304552960

192.168.3.11:443

# Reference: https://twitter.com/PRODAFT/status/1139419259816124416

http://172.16.31.10

# Reference: https://twitter.com/PRODAFT/status/1104782941547192320

172.16.58.3:8070

# Reference: https://twitter.com/James_inthe_box/status/1088774712233058306

7172.16.58.3:443

# Reference: https://twitter.com/James_inthe_box/status/1039936854345150464

192.168.127.12:77

# Reference: https://twitter.com/James_inthe_box/status/1148652274727575558

sertacio12.com

# Reference: https://twitter.com/James_inthe_box/status/1159861664960749569

172.16.58.3:443

# Reference: https://twitter.com/VK_Intel/status/1161493315134603265

172.16.31.10:81

# Reference: https://twitter.com/DynamicAnalysis/status/1223303076100169730

leaben.pw

# Reference: https://twitter.com/James_inthe_box/status/1223307741877297157

buhjike.host

# Reference: https://twitter.com/VK_Intel/status/1224327255104446464
# Referfence: https://www.virustotal.com/gui/file/df2bea2c7d1f9f2a27a62e291cff41e1b3ec677014c98048e82301cd10d36493/detection

192.168.127.12:5010

# Reference: https://twitter.com/DynamicAnalysis/status/1224787828351098880

brewaz.club
zulutwit.site

# Reference: https://twitter.com/JasonMilletary/status/1225820677732737024

rubense.xyz
verobani.website

# Generic

/error_faust.php
/milagrecf.php
{'fraction_non_alphanumeric': 0.12575250836120402, 'fraction_numerical': 0.2555183946488294, 'mean_word_length': 5.5881057268722465, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 29, 'lorem ipsum': 0, 'www.': 2, 'xml': 0}, 'pii_count': 16, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '952924', 'n_tokens_mistral': 1649, 'n_tokens_neox': 1217, 'n_words': 116}