This is a non-IMPACT record, meaning that access to the data is not controlled by IMPACT. For access, see the directions below.

Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.

Summary

DS-1277
Ransomware Tracker Blocklist
External Dataset
External Data Source
abuse.ch
Unknown
Unknown
55 (lowest rank is 55)

Category & Restrictions

Other
malicious traffic, cyber attack, malware, blacklists, cyber crime
Unrestricted
true

Description


Ransomware Tracker offers various types of blocklists that allows you to block Ransomware botnet C&C traffic.

The update interval for the available blocklists is 5 minutes. Blocklists are separated based on malware and blocklist type (URL, Domain, or IP). They allow you to be more specific in what you want to block (e.g. only a certain malware family or blocklist type). The recommended format for the blocklists is a combined format which contains data from all malware types. They might not catch everything, but the false positive rate should be low. However, false positives are possible, especially with regards to RW_IPBL. IP addresses associated with Ransomware Payment Sites (*_PS_IPBL) or Locky botnet C&Cs (LY_C2_IPBL) stay listed on RW_IPBL for a time of 30 days after the last appearence. This means that an IP address stays listed on RW_IPBL even after the threat has been eliminated (e.g. the VPS / server has been suspended by the hosting provider) for another 30 days.

Additional Details

N/A
false
Unknown
cybercrime, server, web browser, spamming, bot, statistical classification, locky, internet hosting, external data source, servers, internet hosting service, 1277, scareware, ransomware tracker blocklist, malware, inferlink corporation, blacklist, false positives and false negatives, hotlist, cyberwarfare, geosocial networking, ip address, online bookmarking services, cryptanalysis, botnet, threat, exploit, ransomware