Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-02-14 15:06Distribution SiteCerber
unityrulesyur.top
Eranet International Limited (n/a)
2017-02-14 14:55Payment SiteCerber
p27dokhpz2n7nvgr.1ktjse.top
Eranet International Limited (n/a)
2017-02-14 14:04Distribution SiteCerber
semiconductry.top
Eranet International Limited (n/a)
2017-02-14 14:02Distribution SiteTorrentLocker
mayaastro.com
GODADDY.COM, LLC146.185.17.132 (- United Kingdom)
2017-02-14 10:34Distribution SiteLocky
ambitiousma.top
Eranet International Limited (n/a)
2017-02-14 10:20Distribution SiteLocky
excellentor.top
Eranet International Limited (n/a)
2017-02-13 23:42Payment SiteCerber
ffoqr3ug7m726zou.1967qy.top
Eranet International Limited (n/a)
2017-02-13 15:31Payment SiteTorrentLocker
x5sbb5gesp6kzwsh.frontmain.pl
EPAG Domainservices GmbH (n/a)
2017-02-13 10:50Payment SiteCerber
p27dokhpz2n7nvgr.1967qy.top
Eranet International Limited (n/a)
2017-02-12 19:08Payment SiteCerber
p27dokhpz2n7nvgr.1gnlsi.top
Eranet International Limited (n/a)
2017-02-12 07:32Payment SiteCerber
p27dokhpz2n7nvgr.1psts4.top
Eranet International Limited (n/a)
2017-02-11 07:46Payment SiteCerber
p27dokhpz2n7nvgr.12umzf.top
Eranet International Limited (n/a)
2017-02-11 06:57Payment SiteCerber
p27dokhpz2n7nvgr.1nmrtq.top
Eranet International Limited (n/a)
2017-02-10 13:49Botnet C&CLocky
46.8.45.18
46.8.45.18 (- Russian Federation)
2017-02-10 05:40Payment SiteCerber
p27dokhpz2n7nvgr.1cglxz.top
Eranet International Limited (n/a)
2017-02-10 04:20Payment SiteCerber
p27dokhpz2n7nvgr.1dz7gk.top
Eranet International Limited (n/a)
2017-02-09 12:42Payment SiteCerber
p27dokhpz2n7nvgr.1bvadx.top
Eranet International Limited (n/a)
2017-02-09 12:37Botnet C&CLocky
83.217.8.234
83.217.8.234 (- Russian Federation)
2017-02-09 12:15Payment SiteCerber
p27dokhpz2n7nvgr.1l4zyd.top
Eranet International Limited (n/a)
2017-02-09 02:37Payment SiteCerber
p27dokhpz2n7nvgr.1d8m97.top
Eranet International Limited (n/a)
2017-02-09 02:03Payment SiteCerber
p27dokhpz2n7nvgr.1gvql3.top
Eranet International Limited (n/a)
2017-02-09 01:03Payment SiteCerber
p27dokhpz2n7nvgr.1h23cc.top
Eranet International Limited (n/a)
2017-02-08 15:32Payment SiteCerber
p27dokhpz2n7nvgr.1bj4k9.top
Eranet International Limited (n/a)
2017-02-07 17:55Payment SiteCerber
p27dokhpz2n7nvgr.1vjnyh.top
Eranet International Limited (n/a)
2017-02-07 11:23Payment SiteCerber
p27dokhpz2n7nvgr.1b3qjy.top
Eranet International Limited (n/a)
2017-02-07 07:06Payment SiteCerber
p27dokhpz2n7nvgr.1fqwek.top
Eranet International Limited (n/a)
2017-02-07 06:35Botnet C&CLocky
193.70.103.182
193.70.103.182 (- Italy)
2017-02-06 16:06Payment SiteCerber
p27dokhpz2n7nvgr.1eeb86.top
Eranet International Limited (n/a)
2017-02-05 20:40Payment SiteCerber
p27dokhpz2n7nvgr.1lt2pn.top
Eranet International Limited (n/a)
2017-02-03 06:53Payment SiteCerber
p27dokhpz2n7nvgr.15jznv.top
Eranet International Limited (n/a)
2017-02-02 22:10Payment SiteCerber
p27dokhpz2n7nvgr.1cbcpy.top
Eranet International Limited (n/a)
2017-02-02 21:47Payment SiteCerber
p27dokhpz2n7nvgr.1cq7gd.top
Eranet International Limited (n/a)
2017-02-02 18:22Payment SiteCerber
p27dokhpz2n7nvgr.1cauz3.top
Eranet International Limited (n/a)
2017-02-02 07:23Payment SiteCerber
p27dokhpz2n7nvgr.1cpb4z.top
Eranet International Limited (n/a)
2017-02-02 05:30Payment SiteCerber
p27dokhpz2n7nvgr.18dawg.top
Eranet International Limited (n/a)
2017-02-01 16:28Botnet C&CLocky
93.170.123.185
93.170.123.185 (- Czech Republic)
2017-01-30 07:57Payment SiteCerber
p27dokhpz2n7nvgr.13gmvm.top
Eranet International Limited (n/a)
2017-01-29 01:18Botnet C&CLocky
88.214.237.45
88.214.237.45 (- Russian Federation)
2017-01-27 12:31Payment SiteCerber
p27dokhpz2n7nvgr.1jw2lx.top
Eranet International Limited (n/a)
2017-01-26 22:07Payment SiteCerber
pe2cku7pebkpgeko.1plugt.top
Eranet International Limited (n/a)
2017-01-26 16:26Payment SiteCerber
p27dokhpz2n7nvgr.1plugt.top
Eranet International Limited (n/a)
2017-01-26 09:37Payment SiteCerber
p27dokhpz2n7nvgr.1cpy1q.top
Eranet International Limited (n/a)
2017-01-25 19:59Payment SiteCerber
p27dokhpz2n7nvgr.15nhsf.top
Eranet International Limited (n/a)
2017-01-25 11:03Payment SiteCerber
p27dokhpz2n7nvgr.14gmtu.top
Eranet International Limited (n/a)
2017-01-25 09:09Payment SiteCerber
ffoqr3ug7m726zou.14gmtu.top
Eranet International Limited (n/a)
2017-01-25 02:11Botnet C&CLocky
46.17.40.234
46.17.40.234 (- Russian Federation)
2017-01-24 16:43Payment SiteCerber
p27dokhpz2n7nvgr.1321z6.top
Eranet International Limited (n/a)
2017-01-24 15:57Payment SiteCerber
ffoqr3ug7m726zou.1321z6.top
Eranet International Limited (n/a)
2017-01-24 07:44Payment SiteCerber
p27dokhpz2n7nvgr.16ay2s.top
Eranet International Limited (n/a)
2017-01-23 16:03Payment SiteCerber
p27dokhpz2n7nvgr.1dp6un.top
Eranet International Limited (n/a)
2017-01-22 06:58Payment SiteCerber
p27dokhpz2n7nvgr.16fohp.top
Eranet International Limited (n/a)
2017-01-21 10:16Payment SiteCerber
p27dokhpz2n7nvgr.1bniyw.top
Eranet International Limited (n/a)
2017-01-21 07:47Payment SiteCerber
p27dokhpz2n7nvgr.1em2j4.top
Eranet International Limited (n/a)
2017-01-20 07:57Payment SiteCerber
p27dokhpz2n7nvgr.1chy1m.top
Eranet International Limited (n/a)
2017-01-20 03:27Payment SiteCerber
p27dokhpz2n7nvgr.1kja1j.top
Eranet International Limited (n/a)
2017-01-19 19:09Payment SiteCerber
p27dokhpz2n7nvgr.1dlcbk.top
Eranet International Limited (n/a)
2017-01-19 11:19Botnet C&CLocky
194.31.59.5
194.31.59.5 (- Russian Federation)
2017-01-19 09:29Botnet C&CLocky
91.237.247.24
91.237.247.24 (- Ukraine)
2017-01-17 07:47Distribution SiteCerber
i01001.dgn.vn
103.243.107.120 (- Vietnam)
2017-01-17 04:02Payment SiteCerber
p27dokhpz2n7nvgr.15l2ub.top
Eranet International Limited (n/a)
2017-01-15 11:34Payment SiteCerber
p27dokhpz2n7nvgr.1pbu64.top
Eranet International Limited (n/a)
2017-01-15 09:37Payment SiteCerber
p27dokhpz2n7nvgr.12gzrv.top
Eranet International Limited (n/a)
2017-01-14 10:21Payment SiteCerber
p27dokhpz2n7nvgr.15rnwa.top
Eranet International Limited (n/a)
2017-01-12 19:37Botnet C&CLocky
195.123.211.6
195.123.211.6 (- Ukraine)
2017-01-12 14:44Botnet C&CLocky
188.127.239.53
188.127.239.53 (- Russian Federation)
2017-01-03 21:56Botnet C&CLocky
91.210.166.51
91.210.166.51 (- Ukraine)
2017-01-03 21:56Botnet C&CLocky
193.32.68.48
193.32.68.48 (- Europe)
2016-12-29 21:07Botnet C&CLocky
91.230.211.187
91.230.211.187 (- Russian Federation)
2016-12-29 13:02Payment SiteCerber
ffoqr3ug7m726zou.1mwipu.top
Eranet International Limited (n/a)
2016-12-29 11:49Payment SiteCerber
p27dokhpz2n7nvgr.1mwipu.top
Eranet International Limited (n/a)
2016-12-29 10:38Payment SiteCerber
pe2cku7pebkpgeko.1mwipu.top
Eranet International Limited (n/a)
2016-12-29 09:04Botnet C&CLocky
185.14.29.64
185.14.29.64 (- Netherlands)
2016-12-28 15:17Botnet C&CLocky
ks-davis.com
GRANSY S.R.O D/B/A SUBREG.CZn/a
2016-12-28 05:43Payment SiteCerber
avsxrcoq2q5fgrw2.1mwipu.top
Eranet International Limited (n/a)
2016-12-27 19:27Distribution SiteCerber
igoodsnd.wang
(n/a)
2016-12-27 19:26Distribution SiteCerber
www.dealkolld.top
Eranet International Limited (n/a)
2016-12-27 19:26Distribution SiteCerber
newgiftnd.wang
(n/a)
2016-12-27 19:24Distribution SiteCerber
newgiftst.top
Eranet International Limited (n/a)
2016-12-26 08:00Payment SiteCerber
pe2cku7pebkpgeko.1pr21c.top
Eranet International Limited (n/a)
2016-12-25 04:46Payment SiteCerber
ftoxmpdipwobp4qy.1gtx3p.top
Eranet International Limited (n/a)
2016-12-25 03:32Payment SiteCerber
fnmi62725zfti2vy.1gtx3p.top
Eranet International Limited (n/a)
2016-12-25 02:56Payment SiteCerber
ffoqr3ug7m726zou.1gtx3p.top
Eranet International Limited (n/a)
2016-12-25 01:26Payment SiteCerber
pe2cku7pebkpgeko.1gtx3p.top
Eranet International Limited (n/a)
2016-12-24 21:09Payment SiteCerber
avsxrcoq2q5fgrw2.1gtx3p.top
Eranet International Limited (n/a)
2016-12-23 05:34Payment SiteCerber
pe2cku7pebkpgeko.199ovv.top
Eranet International Limited (n/a)
2016-12-23 02:59Payment SiteCerber
avsxrcoq2q5fgrw2.199ovv.top
Eranet International Limited (n/a)
2016-12-23 00:50Payment SiteCerber
ftoxmpdipwobp4qy.199ovv.top
Eranet International Limited (n/a)
2016-12-22 07:41Distribution SiteLocky
www.albertproduction.se
NMU Group212.73.29.207 (- Sweden)
2016-12-22 07:41Distribution SiteLocky
rosenblut4u.de
(n/a)
2016-12-22 07:41Distribution SiteLocky
17tattoo.com
WEST263 INTERNATIONAL LIMITED101.200.230.210 (- China)
2016-12-22 07:40Distribution SiteLocky
culturepick.com
WILD WEST DOMAINS, LLC192.138.19.100 (- United States)
2016-12-22 07:40Distribution SiteLocky
nui.tokyo
157.7.188.151 (- Japan)
2016-12-22 07:40Distribution SiteLocky
crownfinancialsolutions.org
GoDaddy.com, LLC184.168.221.41 (- United States)
2016-12-22 07:40Distribution SiteLocky
blendpak.com
TUCOWS DOMAINS INC.209.215.186.5 (- United States)
2016-12-22 07:39Distribution SiteLocky
gerkar.pl
nazwa.pl sp. z o.o. (n/a)
2016-12-22 07:39Distribution SiteLocky
ellsley.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]204.197.240.79 (- United States)
2016-12-22 07:39Distribution SiteLocky
gozovipsite.50webs.com
GODADDY.COM, LLC162.210.101.100 (- United States)
2016-12-22 07:39Distribution SiteLocky
cdsp.pl
Agnat Sp. z o.o.193.239.44.110 (- Poland)
2016-12-22 07:39Distribution SiteLocky
directprotectsolutions.co.uk
Freeola Limited t/a Freeola and [...]93.174.140.46 (- United Kingdom)
2016-12-22 07:39Distribution SiteLocky
htocvt.org
GoDaddy.com, LLC50.62.245.1 (- United States)

# of rows displayed: 100
# of entries in database: 9'211

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >