Ransomware IPs & domains — recent threat feed

Infrastructure linked to ransomware operations and leak sites. Aggregated from 100+ threat intelligence sources, refreshed daily.

122

Malicious IPs

3,039

Malicious domains

2026-07-24

Last updated

Recently listed IPs

Recently listed domains

conspec.us52uo5k3t73ypjije.wz139z.top52uo5k3t73ypjije.zxtezv.bidvyohacxzoue32vvk.pr52ni.topunocl45trpuoefft.c9kp0o.bidp27dokhpz2n7nvgr.1axzcw.toplpholfnvwbukqwye.onion.tolbbw7j6si6k2bzxd4tzvesoufjtr4pa6awqie63rmkpql7hmu6tqnqd.onionojmekzw4mujvqeju.fineboy.atunocl45trpuoefft.o8hpwj.topservicesecurity.orgwjtqjleommc4z46i.idw6s5.bidp27dokhpz2n7nvgr.14gmtu.top4w5wihkwyhsav2ha.fastdances.atdomainstop.topfkkhptb.xyzlockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onionwjtqjleommc4z46i.nxmu0x.bidvaaytyxqyl.eup27dokhpz2n7nvgr.1dlcbk.topecjfdaqmmyusxntwl.workcerberhhyed5frqa.1k1dxt.topkahane.frlockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onionp27dokhpz2n7nvgr.1gvql3.toplockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion52uo5k3t73ypjije.o8hpwj.bidlockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion.lywalkswithsierra.combelahhoast.netmbfce24rgn65bx3g.jktew0.comlockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onionechmfrnyuwrlmas.uk52uo5k3t73ypjije.cpvwgx.bidstgg5jv6mqiibmax.torking.livyohacxzoue32vvk.b14kkk.bidlockbit7z3ddvg5vuez2vznt73ljqgwx5tnuqaa2ye7lns742yiv2zyd.onion27lelchgcvs2wpm7.laverhants.link52uo5k3t73ypjije.x9a6yb.bidcerberhhyed5frqa.45kgok.winbackuphel.com52uo5k3t73ypjije.zclw5i.topeqplamxxqghrd.tfoqwygprskqv65j72.1mudaw.topparonleather.comhubtpfr.infohjhqmbxyinislkkt.1gvyo8.topffoqr3ug7m726zou.rzt69n.topcerberhhyed5frqa.fgfid6.winmmhmtea.pwikecodebina.blasters.bizdriver-boost.comhjhqmbxyinislkkt.1k6bas.topsqrgvbgfyya.orgmyserviceconnect.net52uo5k3t73ypjije.ooulp2.bidzjfq4lnfbs7pncr5.tor2web.org52uo5k3t73ypjije.pr2zwz.bidsouthlife.churchnn54djhfnrnm4dnjnerfsd.replylaten.at

Other threat categories