The "Second Dump" from the Shadow Brokers, consisting of a list of IP addresses allegedly used by the NSA to infect or launch exploits from, generated interest from researchers who analyzed the data using NetFlow data from clients.