Threat feed

Ransomware IPs & domains — recent threat feed

Infrastructure linked to ransomware operations and leak sites. Aggregated from 100+ threat intelligence sources, refreshed daily.

Download the full Ransomware blocklist Check an IP or domain

Downloads are point-in-time snapshots. To consume Ransomware indicators continuously, pull the STIX/TAXII threat intelligence feed into OpenCTI, MISP, or your own pipeline.

Other threat categories

Malware Phishing Command & Control (C2)Botnet Spam Scam Fraud Abuse Attack Proxy & Anonymizers Suspicious Cryptomining