arrowrat.txt

# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.joesandbox.com/analysis/569659/0/html

51.254.27.112:1337

# Reference: https://www.virustotal.com/gui/file/a008373926d8cbfe911875a26f9041005fc82996a1c567958552ce382a9f265e/detection

193.56.29.242:4444

# Reference: https://tria.ge/221010-t3ng6acef4/behavioral1

64.44.167.136:5788
pdra.duckdns.org

# Reference: https://tria.ge/221117-kq1ghsaa7v/behavioral2

arhvn.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1632523598496772098
# Reference: https://www.virustotal.com/gui/file/e37964ebdb10d9e06d3aa47b5ca1500571e13f582d50add487110c7abb26a76c/detection

46.246.84.12:1338
antgobec.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1632525111466008576
# Reference: https://www.virustotal.com/gui/file/59a734c5ae920f5791ace8728981fffe7c9f9270fe26c27c9482dde038dd398c/detection

46.246.84.14:2425
pandora2425.duckdns.org

# Reference: https://www.virustotal.com/gui/file/53fb07f9d952373285abe1044aabe2507ffa492031aa57ceadbdb6fc4d9ae71f/detection

176.97.70.164:2288

# Reference: https://www.virustotal.com/gui/file/9f46555944110c0b982e05620a58e6a3828fa6ad8e8dd8f55894e25150207a5e/detection

191.101.130.52:1338
febbit3.ddns.net

# Reference: https://www.virustotal.com/gui/file/63ab8bad7e72c1c4044743b0de2efd791a4f9bf12e85b2bd973b7309d50eafc8/detection

147.185.221.16:12129
instruments-george.gl.at.ply.gg
instruments-user.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/41940020b7778a380f4d0907d4a95a8afe2108b3df3f7f73d7847d069ff29dcc/detection

103.156.90.165:4046