Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-25 08:19Distribution SiteLocky
rejoincomp2.in
Endurance Domains Technology Pvt[...] (n/a)
2016-08-25 08:18Distribution SiteLocky
dongguklee.wo.to
114.108.131.111 (- Korea)
2016-08-25 08:18Distribution SiteLocky
yourimagination.angelcities.com
TUCOWS DOMAINS INC.66.219.202.10 (- United States)
2016-08-25 08:18Distribution SiteLocky
sfiso.50webs.com
GODADDY.COM, LLC162.210.101.100 (- United States)
2016-08-25 08:18Distribution SiteLocky
brunnenburg.de
(n/a)
2016-08-25 08:18Distribution SiteLocky
www.vogelsang-net.de
81.169.145.226 (- Germany)
2016-08-25 07:41Payment SiteCerber
52uo5k3t73ypjije.yg767p.bid
Eranet International Limited (n/a)
2016-08-24 23:30Payment SiteCerber
unocl45trpuoefft.thanreal.link
Alpnames Limited (n/a)
2016-08-24 17:29Payment SiteCerber
4kqd3hmqgptupi3p.insystem.men
Alpnames Limited (n/a)
2016-08-24 11:51Payment SiteCerber
52uo5k3t73ypjije.dvuybv.bid
Eranet International Limited (n/a)
2016-08-24 09:50Payment SiteCerber
52uo5k3t73ypjije.whosewine.lol
Alpnames Limited (n/a)
2016-08-23 14:07Payment SiteCerber
unocl45trpuoefft.zdamew.bid
Eranet International Limited (n/a)
2016-08-23 12:41Distribution SiteLocky
platimunjinoz.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-23 12:40Distribution SiteLocky
clickme22.wang
Todaynic com Inc (n/a)
2016-08-23 12:39Distribution SiteLocky
jbrktqnxklmuf.info
Gandi SAS104.27.173.113 (- United States)
2016-08-23 12:39Distribution SiteLocky
escapegasmech.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-23 12:38Distribution SiteLocky
mhrbuvcvhjakbisd.xyz
Gandi SAS (n/a)
2016-08-23 12:38Distribution SiteLocky
vittuperkele.com
ERANET INTERNATIONAL LIMITED104.27.174.13 (- United States)
2016-08-23 12:37Distribution SiteLocky
harrypotternotawizard.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-23 09:06Distribution SiteLocky
www.wellness-com.de
91.213.21.61 (- Germany)
2016-08-23 09:05Distribution SiteLocky
www.stucchifedele.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-23 09:05Distribution SiteLocky
www.gioilda.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-23 09:05Distribution SiteLocky
alinmaagroup.com
GODADDY.COM, LLC107.180.26.137 (- United States)
2016-08-23 09:05Distribution SiteLocky
albany.asn.au
Web Address Registration202.59.111.126 (- Australia)
2016-08-23 09:04Distribution SiteLocky
klausschuster.at
81.19.145.66 (- Austria)
2016-08-23 09:04Distribution SiteLocky
delaemvkusnoe.ru
RU-CENTER-RU (n/a)
2016-08-23 09:04Distribution SiteLocky
www.dsalchi.org
eNom, Inc.204.93.177.211 (- United States)
2016-08-23 09:04Distribution SiteLocky
sitkainvestigations.com
GODADDY.COM, LLC192.186.218.164 (- United States)
2016-08-23 09:04Distribution SiteLocky
vilalusa.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]72.52.4.120 (- United States)
2016-08-23 09:03Distribution SiteLocky
hdajaeger.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-23 09:03Distribution SiteLocky
breinco.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]46.183.116.203 (- Spain)
2016-08-23 09:03Distribution SiteLocky
www.kardborren.se
Loopia AB91.189.41.174 (- Sweden)
2016-08-23 09:02Distribution SiteLocky
popcom.be
PopCom NV176.62.164.86 (- Belgium)
2016-08-23 09:02Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC160.153.74.69 (- United States)
2016-08-23 09:02Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM192.186.222.166 (- United States)
2016-08-23 09:02Distribution SiteLocky
gebetech.at
92.63.216.53 (- Austria)
2016-08-23 09:01Distribution SiteLocky
go4leiner.de
(n/a)
2016-08-23 09:01Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC50.63.202.61 (- United States)
2016-08-23 09:01Distribution SiteLocky
vittuperkele.top
Eranet International Limited (n/a)
2016-08-23 09:00Distribution SiteLocky
direttaauto.com
TUCOWS DOMAINS INC.213.217.149.4 (- Italy)
2016-08-23 09:00Distribution SiteLocky
hdjung.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-23 05:14Payment SiteCerber
52uo5k3t73ypjije.dsv023.bid
Eranet International Limited (n/a)
2016-08-23 04:19Payment SiteCerber
52uo5k3t73ypjije.lethints.date
Alpnames Limited (n/a)
2016-08-23 03:03Payment SiteCerber
52uo5k3t73ypjije.p5dxeh.bid
Eranet International Limited (n/a)
2016-08-22 16:28Distribution SiteLocky
whienz.privat.t-online.de
80.150.6.138 (- Germany)
2016-08-22 16:28Distribution SiteLocky
koksi.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-22 16:28Distribution SiteLocky
spiritcity.us
GODADDY.COM, INC.64.29.151.221 (- United States)
2016-08-22 16:28Distribution SiteLocky
akasylberlin.de
188.40.179.193 (- Germany)
2016-08-22 16:27Distribution SiteLocky
www.terlizzigasimpianti.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-22 16:27Distribution SiteLocky
www.comefri.es
62.97.84.20 (- Spain)
2016-08-22 16:27Distribution SiteLocky
www.mhc-stables.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-22 16:27Distribution SiteLocky
moriyamaseikotuin.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-08-22 16:27Distribution SiteLocky
jandoerrenhaus.de
89.31.143.1 (- Germany)
2016-08-22 16:26Distribution SiteLocky
atelierprincesse.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-08-22 16:26Distribution SiteLocky
aide-villages-togo.fr
OVH213.186.33.24 (- France)
2016-08-22 16:26Distribution SiteLocky
www.makarm.plus.com
ENOM, INC.212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-08-22 16:26Distribution SiteLocky
luckyanja.50webs.com
GODADDY.COM, LLC198.23.52.100 (- United States)
2016-08-22 16:26Distribution SiteLocky
w0662mb5g.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-22 16:26Distribution SiteLocky
martin-decker.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-22 16:26Distribution SiteLocky
mail.mgeducation.org
Net 4 India Limited216.58.217.83 (- United States)
2016-08-22 16:26Distribution SiteLocky
tritermia.es
134.0.14.24 (- Spain)
2016-08-22 16:26Distribution SiteLocky
gardenoakshomes.com
NETWORK SOLUTIONS, LLC.206.188.192.29 (- United States)
2016-08-22 16:25Distribution SiteLocky
tatakiage.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-22 16:25Distribution SiteLocky
webtestde.grafi-offshore.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]130.211.84.29 (- United States)
2016-08-22 16:25Distribution SiteLocky
www.c-ambergreen.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.8.25.98 (- Malaysia)
2016-08-22 16:25Distribution SiteLocky
minkastudio.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-08-22 16:24Distribution SiteLocky
jmriba.endoterapiavegetal.com
TUCOWS DOMAINS INC.188.93.75.91 (- Spain)
2016-08-22 16:24Distribution SiteLocky
satnew.rew.pl
DINFO - Systemy Internetowe Sylw[...] (n/a)
2016-08-22 16:24Distribution SiteLocky
raptorbobo.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-08-22 16:24Distribution SiteLocky
ofcoursesports.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-22 16:24Distribution SiteLocky
seiwa1202.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-22 16:08Payment SiteCerber
4kqd3hmqgptupi3p.dozensby.loan
Alpnames Limited (n/a)
2016-08-22 14:08Payment SiteTorrentLocker
vrympoqs5ra34nfo.bigclear.at
(n/a)
2016-08-22 12:41Payment SiteCerber
unocl45trpuoefft.m03t72.bid
Eranet International Limited (n/a)
2016-08-22 12:16Payment SiteCerber
unocl45trpuoefft.n94lrn.bid
Eranet International Limited (n/a)
2016-08-22 03:32Payment SiteCerber
52uo5k3t73ypjije.3zotov.bid
Eranet International Limited (n/a)
2016-08-21 21:41Payment SiteCerber
52uo5k3t73ypjije.o0hwme.bid
Eranet International Limited (n/a)
2016-08-21 18:16Payment SiteCerber
wjtqjleommc4z46i.e53rg4.bid
Eranet International Limited (n/a)
2016-08-21 08:35Payment SiteCerber
52uo5k3t73ypjije.kzhzuc.top
Alpnames Limited (n/a)
2016-08-21 06:58Payment SiteCerber
52uo5k3t73ypjije.neekll.bid
Eranet International Limited (n/a)
2016-08-21 04:59Payment SiteCerber
unocl45trpuoefft.vfuvsv.bid
Eranet International Limited (n/a)
2016-08-21 04:57Payment SiteCerber
52uo5k3t73ypjije.9kxz23.bid
Eranet International Limited (n/a)
2016-08-21 04:07Payment SiteCerber
52uo5k3t73ypjije.f242v5.bid
Eranet International Limited (n/a)
2016-08-21 03:08Payment SiteCerber
52uo5k3t73ypjije.w6sj06.bid
Eranet International Limited (n/a)
2016-08-21 01:52Botnet C&CLocky
egerdpkvutvodmtsy.pw
Namecheap208.100.26.234 (- United States)
2016-08-21 00:37Payment SiteCerber
unocl45trpuoefft.ozlrnx.bid
Eranet International Limited (n/a)
2016-08-21 00:24Payment SiteCerber
52uo5k3t73ypjije.o6fa2g.bid
Eranet International Limited (n/a)
2016-08-20 20:54Payment SiteCerber
unocl45trpuoefft.m9a225.top
Alpnames Limited (n/a)
2016-08-20 19:36Payment SiteCerber
52uo5k3t73ypjije.1g0vo2.bid
Eranet International Limited (n/a)
2016-08-20 18:25Payment SiteCerber
wjtqjleommc4z46i.h8prbu.top
Alpnames Limited (n/a)
2016-08-20 17:04Payment SiteCerber
unocl45trpuoefft.791sd5.bid
Eranet International Limited (n/a)
2016-08-20 16:40Payment SiteCerber
52uo5k3t73ypjije.ssh3ln.bid
Eranet International Limited (n/a)
2016-08-20 09:47Payment SiteCerber
52uo5k3t73ypjije.e78hjo.bid
Eranet International Limited (n/a)
2016-08-20 07:27Payment SiteCerber
52uo5k3t73ypjije.nb83bp.bid
Eranet International Limited (n/a)
2016-08-20 06:42Payment SiteCerber
unocl45trpuoefft.054t69.bid
Eranet International Limited (n/a)
2016-08-20 06:27Payment SiteCerber
52uo5k3t73ypjije.bj9eea.bid
Eranet International Limited (n/a)
2016-08-20 03:30Payment SiteCerber
52uo5k3t73ypjije.95ovzy.top
Alpnames Limited (n/a)
2016-08-20 02:43Payment SiteCerber
unocl45trpuoefft.cifbp9.bid
Eranet International Limited (n/a)
2016-08-20 01:57Payment SiteCerber
52uo5k3t73ypjije.bcjl1h.top
Alpnames Limited (n/a)
2016-08-20 00:46Payment SiteCerber
wjtqjleommc4z46i.obx4vo.bid
Eranet International Limited (n/a)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >