Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-18 13:25Distribution SiteLocky
yifruit.com
GODADDY.COM, LLC211.149.194.192 (- China)
2016-07-18 13:25Distribution SiteLocky
folkstorm.free.fr
ONLINE SAS212.27.63.154 (- France)
2016-07-18 13:25Distribution SiteLocky
mfg.heimat.eu
Key-Systems GmbH (n/a)
2016-07-18 13:25Distribution SiteLocky
city4you.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-18 13:24Distribution SiteLocky
shutadds.w.of.pl
Consulting Service Sp. z o.o.194.177.4.239 (- Poland)
2016-07-18 13:24Distribution SiteLocky
iviarc.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-18 12:01Payment SiteCerber
pmenboeqhyrpvomq.g0ots2.top
Eranet International Limited (n/a)
2016-07-18 11:19Payment SiteCerber
4kqd3hmqgptupi3p.mtxtul.top
Eranet International Limited (n/a)
2016-07-18 10:55Distribution SiteLocky
car-sound.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-18 10:55Distribution SiteLocky
sgvillage.com
ENOM, INC. (n/a)
2016-07-18 10:55Distribution SiteLocky
howtosucceed.tripod.com
CSC CORPORATE DOMAINS, INC.209.202.252.95 (- United States)
2016-07-18 10:55Distribution SiteLocky
marcinek.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-18 10:55Distribution SiteLocky
www.carboplast.it
TIN-REG62.211.65.25 (- Italy)
2016-07-18 10:55Distribution SiteLocky
eightplusnine.com
MISK.COM, INC.202.142.223.132 (- Thailand)
2016-07-18 10:55Distribution SiteLocky
cats.ugu.pl
OVH SAS178.33.49.137 (- Poland)
2016-07-18 10:54Distribution SiteLocky
iss0.tripod.com
CSC CORPORATE DOMAINS, INC.209.202.252.95 (- United States)
2016-07-18 10:54Distribution SiteLocky
klasste.tripod.com
CSC CORPORATE DOMAINS, INC.209.202.252.95 (- United States)
2016-07-18 10:54Distribution SiteLocky
gastro411.com
DINAHOSTING SL82.98.134.249 (- Spain)
2016-07-18 10:54Distribution SiteLocky
static.indirveoyna.com
FBS INC.77.223.136.20 (- Turkey) +2 A record(s) 77.223.136.50 (AS43391, - Turkey)
77.223.136.60 (AS43391, - Turkey)
2016-07-18 10:54Distribution SiteLocky
bursaforex.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-18 10:54Distribution SiteLocky
pichuile.free.fr
ONLINE SAS212.27.63.110 (- France)
2016-07-18 10:54Distribution SiteLocky
enpitsutenpura.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-07-18 10:54Distribution SiteLocky
dmb.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-18 10:54Distribution SiteLocky
naturopatheenligne.free.fr
ONLINE SAS212.27.63.153 (- France)
2016-07-18 10:54Distribution SiteLocky
pacyna2.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-18 10:26Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-07-18 10:26Distribution SiteLocky
BenavidezHoy.com
FASTDOMAIN, INC. (n/a)
2016-07-18 10:26Distribution SiteLocky
findmobileauto.com
ENOM, INC.204.11.56.48 (- Virgin Islands)
2016-07-18 10:26Distribution SiteLocky
leeplastic.com
SHINJIRU MSC SDN BHD111.90.129.100 (- Malaysia)
2016-07-18 10:26Distribution SiteLocky
dnp9.com
ENOM, INC.110.164.189.123 (- Thailand)
2016-07-18 10:26Distribution SiteLocky
bridgeplacements.com
NETWORK SOLUTIONS, LLC.204.11.56.48 (- Virgin Islands)
2016-07-18 10:26Distribution SiteLocky
calcoastlogistics.com
GODADDY.COM, LLC50.63.202.40 (- United States)
2016-07-18 10:26Distribution SiteLocky
travoxsb.com
TUCOWS DOMAINS INC.110.4.45.235 (- Malaysia)
2016-07-18 10:26Distribution SiteLocky
vakantiehuisinauvergne.com
THE REGISTRAR COMPANY B.V.185.27.173.22 (- Netherlands)
2016-07-18 10:26Distribution SiteLocky
my-result.ru
RU-CENTER-RU (n/a)
2016-07-18 10:25Distribution SiteLocky
ilkhaberadana.com
GODADDY.COM, LLC95.173.189.182 (- Turkey)
2016-07-18 10:25Distribution SiteLocky
equalityindonesia.com
CV. JOGJACAMP222.165.255.246 (- Indonesia)
2016-07-18 10:25Distribution SiteLocky
cinerd.info
GoDaddy.com, LLC (n/a)
2016-07-18 10:25Distribution SiteLocky
thegracefamilychurch.com
ENOM, INC.144.217.167.154 (- Canada)
2016-07-18 10:25Distribution SiteLocky
containermx.com
INTERNET DOMAIN SERVICE BS CORP (n/a)
2016-07-18 10:25Distribution SiteLocky
gv.com.my
103.6.244.65 (- Malaysia)
2016-07-18 10:25Distribution SiteLocky
bailamecuba.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-07-18 10:25Distribution SiteLocky
candobetter.net
CRAZY DOMAINS FZ-LLC212.83.147.176 (- France)
2016-07-18 10:25Distribution SiteLocky
acnek.com
GODADDY.COM, LLC160.153.90.134 (- United States)
2016-07-18 10:25Distribution SiteLocky
davisdoherty.co.nz
119.47.117.112 (- New Zealand)
2016-07-18 10:25Distribution SiteLocky
gruposoluciomatica.com.br
191.101.237.135 (- United States)
2016-07-18 10:24Distribution SiteLocky
anchortron.com
GODADDY.COM, LLC192.186.209.130 (- United States)
2016-07-18 10:24Distribution SiteLocky
travelabroadsecret.com
ENOM, INC.108.167.172.116 (- United States)
2016-07-18 10:24Distribution SiteLocky
provincialpw.com
GODADDY.COM, LLC160.153.54.35 (- United States)
2016-07-18 10:24Distribution SiteLocky
ahatv.com.au
Web Address Registration103.226.221.161 (- Australia)
2016-07-18 10:24Distribution SiteLocky
wcouto.com.br
(n/a)
2016-07-18 10:24Distribution SiteLocky
ormanstressrelief.com
ENOM, INC.192.185.64.62 (- United States)
2016-07-18 10:24Distribution SiteLocky
smp.com.mx
Hospedando.Com.Mx67.227.172.16 (- United States)
2016-07-18 10:24Distribution SiteLocky
aquatixbottle.com
GODADDY.COM, LLC192.186.212.231 (- United States)
2016-07-18 10:24Distribution SiteLocky
matthewmccright.org
GoDaddy.com, LLC198.71.233.23 (- United States)
2016-07-18 10:24Distribution SiteLocky
serviceautoiasi.com
EURODNS S.A85.9.56.193 (- Romania) +1 A record(s) 85.9.56.198 (AS5588, - Romania)
2016-07-18 10:24Distribution SiteLocky
deanstum.com
GODADDY.COM, LLC192.186.229.69 (- United States)
2016-07-18 10:24Distribution SiteLocky
s2mgmt.com
GODADDY.COM, LLC23.236.62.147 (- United States)
2016-07-18 10:24Distribution SiteLocky
colleenthestylist.com
GODADDY.COM, LLC107.180.46.143 (- United States)
2016-07-18 10:24Distribution SiteLocky
ecpi.ro
Romarg SRL89.42.223.64 (- Romania)
2016-07-18 10:24Distribution SiteLocky
blackdildo.net
ENOM, INC. (n/a)
2016-07-18 10:23Distribution SiteLocky
otwayorchard.net
ENOM, INC.202.191.62.205 (- Australia)
2016-07-18 10:23Distribution SiteLocky
bigislandhawaiihilorealestate.com
1&1 INTERNET SE184.106.55.108 (- United States)
2016-07-18 10:23Distribution SiteLocky
tip.ub.ac.id
175.45.184.161 (- Indonesia)
2016-07-18 10:23Distribution SiteLocky
cbactive.com
GODADDY.COM, LLC23.229.171.33 (- United States)
2016-07-18 10:23Distribution SiteLocky
banthaoduoc.com
MAT BAO TRADING & SERVICE COMPAN[...]125.253.113.122 (- Vietnam)
2016-07-18 10:23Distribution SiteLocky
christian-view.com
TUCOWS DOMAINS INC.69.90.163.170 (- Canada)
2016-07-18 10:23Distribution SiteLocky
kouzoncorporation.com
GODADDY.COM, LLC192.185.4.129 (- United States)
2016-07-18 10:23Distribution SiteLocky
cloudbws.com
GODADDY.COM, LLC (n/a)
2016-07-18 10:23Distribution SiteLocky
fusofrance.fr
OVH (n/a)
2016-07-18 10:08Payment SiteCerber
52uo5k3t73ypjije.g0ots2.top
Eranet International Limited (n/a)
2016-07-18 05:09Payment SiteCerber
52uo5k3t73ypjije.mtxtul.top
Eranet International Limited (n/a)
2016-07-18 04:27Payment SiteCerber
27lelchgcvs2wpm7.tankbe.pro
(n/a)
2016-07-18 03:53Payment SiteCerber
52uo5k3t73ypjije.0n5joc.top
Eranet International Limited (n/a)
2016-07-18 03:09Payment SiteCerber
pmenboeqhyrpvomq.shutlazy.casa
Alpnames (n/a)
2016-07-17 20:15Payment SiteCerber
52uo5k3t73ypjije.9nj8ex.top
Eranet International Limited (n/a)
2016-07-17 17:12Payment SiteCerber
4kqd3hmqgptupi3p.3lhjyx.top
Eranet International Limited (n/a)
2016-07-17 16:07Payment SiteCerber
4kqd3hmqgptupi3p.k7oud1.top
Eranet International Limited (n/a)
2016-07-17 15:59Payment SiteTorrentLocker
mz7oyb3v32vshcvk.toysworlds.at
(n/a)
2016-07-17 15:22Payment SiteCerber
52uo5k3t73ypjije.k7oud1.top
Eranet International Limited (n/a)
2016-07-17 13:35Payment SiteCerber
52uo5k3t73ypjije.mfgb1h.top
Eranet International Limited (n/a)
2016-07-17 12:11Payment SiteCerber
27lelchgcvs2wpm7.uboys5.top
Eranet International Limited (n/a)
2016-07-17 10:57Payment SiteCerber
52uo5k3t73ypjije.imhhwm.top
Eranet International Limited (n/a)
2016-07-17 00:06Payment SiteCerber
27lelchgcvs2wpm7.xmvr54.top
Eranet International Limited (n/a)
2016-07-16 22:53Payment SiteCerber
27lelchgcvs2wpm7.7zv8o2.top
Eranet International Limited (n/a)
2016-07-16 19:24Payment SiteCerber
pmenboeqhyrpvomq.loopsay.link
Alpnames Limited (n/a)
2016-07-16 17:57Payment SiteCerber
27lelchgcvs2wpm7.apperloads.win
Alpnames Limited (n/a)
2016-07-16 17:56Payment SiteCerber
52uo5k3t73ypjije.poplenjohs.review
Alpnames Limited (n/a)
2016-07-16 17:42Payment SiteCerber
pmenboeqhyrpvomq.thyx30.top
Eranet International Limited (n/a)
2016-07-16 17:07Botnet C&CLocky
5.187.0.137
5.187.0.137 (- Germany)
2016-07-16 13:58Distribution SiteLocky
spruielldrilling.com
GODADDY.COM, LLC50.63.202.49 (- United States)
2016-07-16 12:14Payment SiteCerber
52uo5k3t73ypjije.ahvshc.top
Eranet International Limited (n/a)
2016-07-16 12:14Payment SiteCerber
27lelchgcvs2wpm7.marksgain.kim
Alpnames Limited (n/a)
2016-07-16 08:08Payment SiteCerber
52uo5k3t73ypjije.deg5xr.top
Eranet International Limited (n/a)
2016-07-16 07:36Payment SiteCerber
27lelchgcvs2wpm7.9ildst.top
Eranet International Limited (n/a)
2016-07-15 21:28Payment SiteCerber
pmenboeqhyrpvomq.swissprogramms.bid
Alpnames Limited (n/a)
2016-07-15 21:15Payment SiteCerber
pmenboeqhyrpvomq.ka0te8.top
Eranet International Limited (n/a)
2016-07-15 20:59Payment SiteCerber
52uo5k3t73ypjije.zclw5i.top
Eranet International Limited (n/a)
2016-07-15 17:29Payment SiteCerber
pmenboeqhyrpvomq.9nkxd3.top
Eranet International Limited (n/a)
2016-07-15 14:10Distribution SiteLocky
assopeltro.com
REGISTER.IT SPA195.110.124.188 (- Italy)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >