Ransomware IP address :: 195.184.216.250

IP Information

IP address:195.184.216.250
Hostname:hosters-nks-gagar2a.donbass.com
AS number:AS3261
AS name:DIPT-AS LLC _FTICOM_, UA
Country:- Ukraine (UA)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 195.184.216.250.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2017-10-12 05:07:49fetchstats.netnoEranet International LimitedDistribution SiteLocky
2017-10-11 11:27:06fetchstats.netnoEranet International LimitedDistribution SiteLocky
2017-10-11 10:29:40nsaflow.infonoEranet International LimitedDistribution SiteLocky
2017-10-10 18:50:09nsaflow.infonoEranet International LimitedDistribution SiteLocky
2017-10-10 08:54:11nsaflow.infonoEranet International LimitedDistribution SiteLocky
2017-10-10 08:50:04scottfranch.orgnoTodaynic.com, Inc.Distribution SiteLocky
2017-10-09 11:20:22scottfranch.orgnoTodaynic.com, Inc.Distribution SiteLocky
2017-10-05 08:08:21derainlay.infonoEranet International LimitedDistribution SiteLocky
2017-10-04 09:27:51derainlay.infonoEranet International LimitedDistribution SiteLocky
2017-10-04 08:47:56aimonino.infonoEranet International LimitedDistribution SiteLocky
2017-10-02 11:10:48sherylbro.netnoEranet International LimitedDistribution SiteLocky
2017-09-29 12:19:17poemsan.infonoEranet International LimitedDistribution SiteLocky
2017-09-29 05:33:27sherylbro.netnoEranet International LimitedDistribution SiteLocky
2017-09-28 05:46:41poemsan.infonoEranet International LimitedDistribution SiteLocky
2017-09-27 12:42:51poemsan.infonoEranet International LimitedDistribution SiteLocky
2017-09-26 20:12:48playbrief.infonoEranet International LimitedDistribution SiteLocky
2017-09-26 09:40:55playbrief.infonoEranet International LimitedDistribution SiteLocky
2017-09-18 09:16:28miliaraic.runoR01-RUDistribution SiteLocky
2016-12-15 06:48:54autozirkus.comnoENOM, INC.Distribution SiteLocky
2016-12-14 11:48:47autozirkus.comnoENOM, INC.Distribution SiteLocky
2016-05-06 08:42:37ik4dm.mazerunci.atnoPayment SiteTeslaCrypt
2016-05-05 05:51:39h54dc.leverdaze.atnoPayment SiteTeslaCrypt
2016-05-02 06:05:48l123d.feustude.atnoPayment SiteTeslaCrypt
2016-04-20 07:23:55wor4d.slewirk.atnoPayment SiteTeslaCrypt

Ransomware infrastructure associated with this IP address: 24