Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-05 12:02Distribution SiteLocky
esting.es
176.31.61.108 (- France)
2016-08-05 12:02Distribution SiteLocky
commentaborderunefille.fr
ONLINE SAS213.186.33.4 (- France)
2016-08-05 12:02Distribution SiteLocky
www.robertogori.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.isolatelematica.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.hotellaconchiglialmd.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.netsyscom.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.leonardopivi.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.filix.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
naturopathiesante.fr
NUXIT195.114.18.164 (- France)
2016-08-05 12:02Distribution SiteLocky
www.dedycker.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-05 12:01Distribution SiteLocky
nickvero.3x.ro
ICI - ROTLD89.42.39.160 (- Romania)
2016-08-05 12:01Distribution SiteLocky
nakip.com.ua
(n/a)
2016-08-05 12:01Distribution SiteLocky
heidechopper.de
46.30.213.113 (- Denmark)
2016-08-05 12:01Distribution SiteLocky
osarunoyakata.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.35 (- United States)
2016-08-05 12:01Distribution SiteLocky
drenkelford.net
KEY-SYSTEMS GMBH (n/a)
2016-08-05 12:01Distribution SiteLocky
rbrandi.interfree.it
REGISTER-REG80.91.55.51 (- Italy)
2016-08-05 12:00Distribution SiteLocky
portalcerrado.com.br
187.45.193.170 (- Brazil)
2016-08-05 12:00Distribution SiteLocky
listanegra.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-08-05 08:47Payment SiteCerber
unocl45trpuoefft.rslh9a.top
Eranet International Limited (n/a)
2016-08-05 07:20Payment SiteCerber
4kqd3hmqgptupi3p.43wjor.top
Eranet International Limited (n/a)
2016-08-05 05:16Payment SiteCerber
52uo5k3t73ypjije.pap44w.top
Eranet International Limited (n/a)
2016-08-05 05:03Payment SiteCerber
pmenboeqhyrpvomq.4pzclh.top
Eranet International Limited (n/a)
2016-08-05 02:14Payment SiteCerber
unocl45trpuoefft.ibngww.top
Eranet International Limited (n/a)
2016-08-05 00:36Payment SiteCerber
52uo5k3t73ypjije.r21wmw.top
Eranet International Limited (n/a)
2016-08-04 23:04Payment SiteCerber
52uo5k3t73ypjije.4n592s.top
Alpnames Limited (n/a)
2016-08-04 22:19Payment SiteCerber
52uo5k3t73ypjije.gpy3tc.top
Eranet International Limited (n/a)
2016-08-04 22:16Payment SiteCerber
52uo5k3t73ypjije.zda7bk.top
Eranet International Limited (n/a)
2016-08-04 21:41Payment SiteCerber
52uo5k3t73ypjije.8a0sf6.top
Eranet International Limited (n/a)
2016-08-04 21:23Payment SiteCerber
unocl45trpuoefft.eyohd2.top
Eranet International Limited (n/a)
2016-08-04 18:24Payment SiteCerber
unocl45trpuoefft.0vgu64.top
Eranet International Limited (n/a)
2016-08-04 17:09Payment SiteCerber
unocl45trpuoefft.hynwbs.top
Eranet International Limited (n/a)
2016-08-04 17:05Payment SiteCerber
unocl45trpuoefft.pap44w.top
Eranet International Limited (n/a)
2016-08-04 16:30Payment SiteCerber
52uo5k3t73ypjije.x9le66.top
Eranet International Limited (n/a)
2016-08-04 16:06Payment SiteCerber
52uo5k3t73ypjije.wrd4fo.top
Eranet International Limited (n/a)
2016-08-04 15:28Payment SiteCerber
unocl45trpuoefft.dyo7c9.top
Eranet International Limited (n/a)
2016-08-04 15:11Payment SiteCerber
unocl45trpuoefft.x9le66.top
Eranet International Limited (n/a)
2016-08-04 14:29Payment SiteCerber
52uo5k3t73ypjije.ibngww.top
Eranet International Limited (n/a)
2016-08-04 14:17Payment SiteCerber
unocl45trpuoefft.o2dval.top
Eranet International Limited (n/a)
2016-08-04 13:52Distribution SiteLocky
nonpareil.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-04 12:36Distribution SiteLocky
cigareta.prodejce.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-08-04 12:35Distribution SiteLocky
www.katzenhaifischer.de
85.183.254.23 (- Germany)
2016-08-04 12:35Distribution SiteLocky
www.marinadiugento.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-04 12:35Distribution SiteLocky
www.casarella.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-04 12:17Payment SiteCerber
4kqd3hmqgptupi3p.termprior.men
(n/a)
2016-08-04 11:58Distribution SiteLocky
yeniyuzyillions.org
eNom, Inc.195.87.101.81 (- Turkey)
2016-08-04 11:58Distribution SiteLocky
customjets.net
NETWORK SOLUTIONS, LLC.208.91.197.132 (- Virgin Islands)
2016-08-04 11:47Distribution SiteLocky
brupuoli.tempsite.ws
GoDaddy.com187.45.195.186 (- Brazil)
2016-08-04 11:47Distribution SiteLocky
www.ekstraciuchy.pl
Michau Enterprises Ltd.95.211.144.65 (- Netherlands)
2016-08-04 11:47Distribution SiteLocky
ftp.bergamo.chiesacattolica.it
GLAUCO-REG89.119.94.51 (- Italy)
2016-08-04 11:47Distribution SiteLocky
www.bwmodels.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-04 11:47Distribution SiteLocky
escapegasmech.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-04 11:46Distribution SiteLocky
abi64.com
OVH213.186.33.19 (- France)
2016-08-04 11:46Distribution SiteLocky
platimunjinoz.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-04 11:46Distribution SiteLocky
potato.chottu.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-04 11:46Distribution SiteLocky
tyouseikan.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-08-04 11:46Distribution SiteLocky
bikepaintpureworks.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-08-04 11:46Distribution SiteLocky
www.kishazy.hu
217.13.33.12 (- Hungary)
2016-08-04 11:46Distribution SiteLocky
regeneratewert.ws
Eranet International Limited (n/a)
2016-08-04 11:46Distribution SiteLocky
www.comunedicanischio.it
TISCALIDOMAIN-REG (n/a)
2016-08-04 11:46Distribution SiteLocky
karnat.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-04 11:46Distribution SiteLocky
innal.com.mx
Wingu Networks, SA de CV (n/a)
2016-08-04 11:46Distribution SiteLocky
mbc.nekonikoban.org
GMO Internet, Inc. d/b/a Onamae.[...]112.140.42.29 (- Japan)
2016-08-04 11:45Distribution SiteLocky
film-online.bejbiblues.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-04 11:45Distribution SiteLocky
composit.vtrbandaancha.net
REGISTER.COM, INC.200.83.4.62 (- Chile)
2016-08-04 11:45Distribution SiteLocky
www.artistsagainstwar.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-04 11:45Distribution SiteLocky
schello4u.de
(n/a)
2016-08-04 11:45Distribution SiteLocky
www.agriturismolapiana.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-04 11:27Payment SiteCerber
pmenboeqhyrpvomq.s71vsc.top
Eranet International Limited (n/a)
2016-08-04 09:56Payment SiteCerber
52uo5k3t73ypjije.8hphyr.top
Eranet International Limited (n/a)
2016-08-04 07:44Payment SiteCerber
52uo5k3t73ypjije.y5j7e6.top
Eranet International Limited (n/a)
2016-08-04 07:29Payment SiteCerber
unocl45trpuoefft.n41n1a.top
Eranet International Limited (n/a)
2016-08-04 05:21Payment SiteCerber
52uo5k3t73ypjije.msu96b.top
Eranet International Limited (n/a)
2016-08-04 03:51Payment SiteCerber
pmenboeqhyrpvomq.as5su5.top
Eranet International Limited (n/a)
2016-08-04 03:42Payment SiteCerber
52uo5k3t73ypjije.43wjor.top
Eranet International Limited (n/a)
2016-08-04 02:03Payment SiteCerber
52uo5k3t73ypjije.4ynpjd.top
Eranet International Limited (n/a)
2016-08-04 01:46Payment SiteCerber
pmenboeqhyrpvomq.n41n1a.top
Eranet International Limited (n/a)
2016-08-04 00:16Payment SiteCerber
pmenboeqhyrpvomq.v11z5e.top
Alpnames Limited (n/a)
2016-08-03 22:14Payment SiteCerber
52uo5k3t73ypjije.wz139z.top
Eranet International Limited (n/a)
2016-08-03 20:00Payment SiteCerber
4kqd3hmqgptupi3p.wz139z.top
Eranet International Limited (n/a)
2016-08-03 19:30Payment SiteCerber
52uo5k3t73ypjije.bnctf6.top
Eranet International Limited (n/a)
2016-08-03 17:57Payment SiteCerber
unocl45trpuoefft.uw3r6a.top
Eranet International Limited (n/a)
2016-08-03 17:08Payment SiteCerber
52uo5k3t73ypjije.veupl2.top
Eranet International Limited (n/a)
2016-08-03 16:05Payment SiteCerber
52uo5k3t73ypjije.31wkhu.top
Eranet International Limited (n/a)
2016-08-03 15:35Payment SiteCerber
52uo5k3t73ypjije.uw3r6a.top
Eranet International Limited (n/a)
2016-08-03 15:30Payment SiteCerber
52uo5k3t73ypjije.dkrie7.top
Eranet International Limited (n/a)
2016-08-03 13:54Distribution SiteLocky
goldjinoz.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-08-03 13:22Distribution SiteLocky
yosakokori.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.42 (- United States)
2016-08-03 13:22Distribution SiteLocky
used-mitsubishi-cars.co.uk
COLCATWEB Limited t/a UK-Cheapes[...]81.21.75.32 (- United Kingdom)
2016-08-03 13:21Distribution SiteLocky
architekten-gm.de
80.150.6.143 (- Germany)
2016-08-03 13:21Distribution SiteLocky
dapmaf.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-08-03 13:21Distribution SiteLocky
ekuserennto.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-03 13:21Distribution SiteLocky
modulofm.com.br
189.112.7.214 (- Brazil)
2016-08-03 13:20Distribution SiteLocky
www.thberg.de
81.169.145.66 (- Germany)
2016-08-03 13:20Distribution SiteLocky
www.lionsclubpaderno.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-03 13:20Distribution SiteLocky
www.haisictirdeaici.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-08-03 13:12Payment SiteCerber
52uo5k3t73ypjije.1de02r.top
Eranet International Limited (n/a)
2016-08-03 13:00Distribution SiteLocky
www.nadelaur.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]195.130.132.84 (- Belgium)
2016-08-03 13:00Distribution SiteLocky
www.valser.onored.com
NOMINALIA INTERNET S.L. (n/a)
2016-08-03 13:00Distribution SiteLocky
sv-handwerk.de
195.3.249.236 (- Germany)
2016-08-03 12:59Distribution SiteLocky
foodbiz-net.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]211.13.196.136 (- Japan)

# of rows displayed: 100
# of entries in database: 9'210

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >