Threat feed
Ransomware IPs & domains — recent threat feed
Infrastructure linked to ransomware operations and leak sites. Aggregated from 100+ threat intelligence sources, refreshed daily.
- Malicious IPs
- 144
- Malicious domains
- 3 060
- Last updated
- 2026-10-19
Downloads are snapshots. For continuous Ransomware indicators, pull the STIX/TAXII threat feed into OpenCTI, MISP or your own pipeline.
Recently listed IPs
103.207.68.22991.211.119.98188.127.237.175185.202.2.12137.75.37.31142.171.8.3431.184.192.385.143.212.23165.227.85.8746.4.135.209173.82.106.2077.222.54.202195.201.101.14646.101.193.140149.28.63.12188.80.147.10252.237.96.13185.14.28.109193.43.72.1131.200.249.16251.15.18.180162.244.80.235167.172.239.6845.32.161.213185.17.40.178107.174.34.20393.107.12.031.200.249.23766.42.76.46194.1.236.126165.22.105.225185.182.193.12092.51.2.2223.227.163.20689.40.115.248109.230.199.10682.118.21.154.38.212.197162.212.157.1095.182.5.12631.200.249.231185.106.122.4681.19.135.219193.37.69.16314.0.0.9114.230.238.4547.254.157.47185.117.153.17689.108.73.12431.200.249.23345.32.108.54188.119.67.17959.103.72.44205.185.116.23331.200.249.13081.17.29.165209.14.0.234104.168.62.23594.182.110.253182.38.67.20
Recently listed domains
pgtluajeufxn.orgdrivegit.com4kqd3hmqgptupi3p.tieslaws.linkviviendas8.comqfjhpgbefuhenjp7.1e1jbc.toplockbit-blog.comtinneatonenessnabobical.comunocl45trpuoefft.hyr1h3.bid4kqd3hmqgptupi3p.valueshes.bid4kqd3hmqgptupi3p.kml2o2.top52uo5k3t73ypjije.ojesoa.bidunocl45trpuoefft.cifbp9.bid4kqd3hmqgptupi3p.gletterstan.tradetaskshedulewin.comffoqr3ug7m726zou.zu3fzc.bidreal346real.topp27dokhpz2n7nvgr.16qpet.topwwld4ztvwurz4.comlockbitsap2oaqhcun3syvbqt6n5nzt7fqosc6jdlmsfleu3ka4k2did.onionpeppyinsta.comunocl45trpuoefft.06j7o0.topwjtqjleommc4z46i.zclhx9.bidhustlernystripclub.comlockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onionhjhqmbxyinislkkt.1qjl23.toppe2cku7pebkpgeko.hclz73.tophjhqmbxyinislkkt.1aqq5k.topunocl45trpuoefft.givxuf.biddnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onionct-ov.comp27dokhpz2n7nvgr.1pbu64.top52uo5k3t73ypjije.rl0bdw.topwjtqjleommc4z46i.cgab48.bidservicesups.comunocl45trpuoefft.wl8t6k.bidcwxghlngfxo.nl4kqd3hmqgptupi3p.v11z5e.toplockbit7z3hv7ev5knxbrhsvv2mmu2rddwqizdz4vwfvxt5izrq6zqqd.onionbakcup-checker.com52uo5k3t73ypjije.4jub4e.bidlfdachijzuwx4bc4.zreknv.bidpiaristesafriquecentrale.orgvoreralosangha.inwww.dokjasura.topthcfqk.itqfjhpgbefuhenjp7.16g9ub.topdvmbtgoobxcc.pw27lelchgcvs2wpm7.ag082d.top52uo5k3t73ypjije.j8873f.bidunocl45trpuoefft.8kcfnk.bid52uo5k3t73ypjije.goztus.biduuwflbmjmi.eujournals.we4kqd3hmqgptupi3p.mustspace.uskyyba.com3qbyaoohkcqkzrz6.torgateway.lijmltda.clmz7oyb3v32vshcvk.toysworlds.atlbbscnqexve2wg6acbfyohkzeijflpqmgijx5ksyvu4aljv27r2lgiid.onionmbfce24rgn65bx3g.yio3lvx.com