# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: raptor train, raptortrain

# Reference: https://blog.lumen.com/derailing-the-raptor-train/
# Reference: https://github.com/blacklotuslabs/IOCs/blob/main/Raptor_Train_IOCs.txt

104.244.89.157:34125
108.61.177.81:443
114.255.70.20:34125
114.255.70.30:34125
139.180.137.219:443
14.1.98.223:34125
149.248.51.22:443
155.138.133.56:443
155.138.151.225:443
185.14.45.160:34125
185.207.154.253:34125
195.234.62.184:443
195.234.62.188:443
195.234.62.18:443
195.234.62.192:443
195.234.62.197:443
195.234.62.198:443
195.234.62.19:443
202.182.109.151:34125
202.182.109.151:443
207.148.122.69:443
207.148.68.131:443
210.61.186.117:34125
223.98.159.112:34125
23.236.68.161:443
23.236.68.193:443
23.236.68.213:443
23.236.68.229:443
23.236.69.110:443
23.236.69.82:443
37.61.229.15:443
37.61.229.17:443
37.9.35.89:443
45.10.58.128:443
45.10.58.129:443
45.10.58.130:443
45.10.58.132:443
45.10.58.133:443
45.13.199.104:443
45.13.199.140:443
45.13.199.152:443
45.13.199.207:443
45.13.199.45:443
45.13.199.84:443
45.13.199.96:443
45.135.117.131:443
45.135.117.136:443
45.77.231.209:443
45.80.215.149:443
45.80.215.150:443
45.80.215.151:443
45.80.215.152:443
45.80.215.153:443
45.80.215.154:443
45.80.215.155:443
45.80.215.156:443
45.80.215.186:443
45.80.215.47:443
45.92.70.111:443
45.92.70.112:443
45.92.70.113:443
45.92.70.115:443
45.92.70.68:443
45.92.70.71:443
5.181.27.19:443
5.181.27.219:443
5.181.27.21:443
5.181.27.6:443
5.188.33.135:34125
5.188.33.228:34125
5.45.184.68:443
5.8.33.26:443
65.20.97.251:443
78.141.238.97:443
85.90.216.110:443
85.90.216.111:443
85.90.216.112:443
85.90.216.115:443
85.90.216.116:443
85.90.216.69:443
89.44.198.195:443
89.44.198.200:443
89.44.198.254:443
91.216.190.154:443
91.216.190.247:443
91.216.190.2:443
91.216.190.74:443
91.216.190.80:443
92.223.30.232:443
92.223.30.233:443
92.223.30.241:443
92.38.135.146:443
92.38.176.131:443
92.38.176.156:443
92.38.178.232:443
92.38.185.43:443
92.38.185.44:443
92.38.185.45:443
92.38.185.46:443
92.38.185.47:443
abpi.b2047.com
acgtjkiufde.b2047.com
adjsn.com
aewreiuicajo.w8510.com
amdord.com
amushuvfikjas.b2047.com
apdfhhjcxcb.w8510.com
api.k3121.com
aqakffj.com
awbpxtpi.w8510.com
awerdasvbjgrt.b2047.com
awqx.k3121.com
axqw.k3121.com
ayln.b2047.com
bcdkwwuah.com
bkhqwfhtu.com
blepmhnay.com
bxgtbv.com
bzbatflwb.w8510.com
clqqknzb.com
cvgeuwo.com
cvmnomvxm.com
dfgh.k3121.com
dftiscasdwe.w8510.com
dkuwbcen.com
dvujvkfu.com
ecvkiehs.com
eufcj.com
fajxtg.com
firc.b2047.com
ftcexq.com
glxxet.com
gmhrxhc.com
grntjr.com
hersrr.com
hfsdln.com
hnai.k3121.com
hume.b2047.com
hy1025.com
hy229.com
hy324.com
hy424.com
hy529.com
hy619.com
hy811.com
hy830.com
hy92.com
hyddh.com
hyjk.k3121.com
iycwqot.com
jgnsqihc.com
jkwxcc.com
kliscjaisdjhi.w8510.com
kmgzbowwg.com
kuyw.b2047.com
lfdx.k3121.com
lfzupr.com
lofeuq.com
lomuzs.com
lyblqwesfawe.w8510.com
lznmihdej.com
mail.k3121.com
mjiudwajhkf.w8510.com
mudvw.com
mvxnspcqr.com
nhcmdikkd.com
nmfagp.com
nulp.k3121.com
obqlibg.com
ocmnusdjdik.w8510.com
oicdsgjxz.com
oklm.b2047.com
oklm.k3121.com
omviak.com
oploz.com
qacassdfawemp.w8510.com
qjknpv.com
qsxgzu.com
qwsd.k3121.com
rnjca.com
saoadlg.com
sbuybjv.com
sreudcnb.com
ttcyci.com
tuisasdcxzd.w8510.com
tvcvhzyk.com
ujrtkw.com
vbbrfvhrg.com
vgbgwzmr.com
voias.b2047.com
wmllxwkg.w8510.com
wndaoyk.com
woaba.com
wsxe.k3121.com
wvsezu.com
xaqw.k3121.com
xbqw.k3121.com
xxqw.b2047.com
ykcmewapc.com
ysubryfv.com
zasdfgasd.w8510.com
zdacasdc.w8510.com
zdacxzd.w8510.com
zuszr.com
