Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-13 10:28Payment SiteCerber
52uo5k3t73ypjije.0nyi6l.bid
Eranet International Limited (n/a)
2016-08-13 09:55Payment SiteCerber
52uo5k3t73ypjije.r2ok0b.bid
Eranet International Limited (n/a)
2016-08-13 09:01Payment SiteCerber
52uo5k3t73ypjije.uw7w05.bid
Eranet International Limited (n/a)
2016-08-13 08:40Distribution SiteLocky
digiwebstore.fr
OVH213.186.33.19 (- France)
2016-08-12 15:51Payment SiteCerber
52uo5k3t73ypjije.lrraca.bid
Eranet International Limited (n/a)
2016-08-12 13:22Payment SiteCerber
pmenboeqhyrpvomq.0nyi6l.bid
Eranet International Limited (n/a)
2016-08-12 13:21Distribution SiteLocky
portraitstaffa.de
89.110.129.54 (- Germany)
2016-08-12 13:21Distribution SiteLocky
sportpferde-weihmayer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-12 13:21Distribution SiteLocky
www.bitupont.hu
5.9.43.15 (- Germany)
2016-08-12 13:21Distribution SiteLocky
files.zdaspb.ru
R01-RU80.64.104.213 (- Russian Federation)
2016-08-12 13:20Distribution SiteLocky
www.herinvest.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-12 13:20Distribution SiteLocky
www.milleniumbar.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-12 13:19Distribution SiteLocky
muteofficial.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
broda.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-08-12 13:19Distribution SiteLocky
www.ceccosport.it
TISCALIDOMAIN-REG141.8.224.153 (- Switzerland)
2016-08-12 13:19Distribution SiteLocky
scom2.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
kolkhoz.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
studiocorrado.org
Ascio Technologies, Inc. Danmark[...]79.98.45.16 (- Italy)
2016-08-12 13:18Distribution SiteLocky
bonmoment.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-08-12 13:17Distribution SiteLocky
www.meteoerba.it
TISCALIDOMAIN-REG31.11.34.46 (- Italy)
2016-08-12 13:17Distribution SiteLocky
birthday-cards.50webs.com
GODADDY.COM, LLC162.210.101.23 (- United States)
2016-08-12 13:17Distribution SiteLocky
www.hi-segno.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-12 13:16Distribution SiteLocky
tianooze.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.41 (- United States)
2016-08-12 13:16Distribution SiteLocky
dopelx.com
REGISTER.IT SPA81.88.57.70 (- Italy)
2016-08-12 13:16Distribution SiteLocky
www.nikawilliam.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-08-12 13:16Distribution SiteLocky
preglitzer.heimat.eu
Key-Systems GmbH213.208.133.41 (- Austria)
2016-08-12 13:15Distribution SiteLocky
www.oxxengarde.de
80.150.6.143 (- Germany)
2016-08-12 13:15Distribution SiteLocky
einfachwalter.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-12 13:15Distribution SiteLocky
www.homesplus.nf.net
NETWORK SOLUTIONS, LLC.216.251.43.11 (- United States)
2016-08-12 13:15Distribution SiteLocky
sv-sportscars.nl
WebReus46.235.42.86 (- Netherlands)
2016-08-12 11:59Payment SiteCerber
52uo5k3t73ypjije.2gbbja.top
Eranet International Limited (n/a)
2016-08-11 16:36Distribution SiteLocky
agarty.kz
ICPS195.210.46.61 (- Kazakhstan)
2016-08-11 11:04Distribution SiteLocky
www.EastsideAutoSalvage.com
GODADDY.COM, LLC216.116.20.36 (- United States)
2016-08-11 11:04Distribution SiteLocky
iceninegr.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-08-11 11:03Distribution SiteLocky
www.halloweenparty.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-08-11 11:03Distribution SiteLocky
www.tommasobovone.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-11 11:02Distribution SiteLocky
momoselok.ru
RU-CENTER-RU5.79.72.215 (- Netherlands)
2016-08-11 11:01Distribution SiteLocky
mccrarys.us
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.209 (- United States)
2016-08-11 11:01Distribution SiteLocky
antonello.messina.it
EUTELIA-REG83.211.227.140 (- Italy)
2016-08-11 11:00Distribution SiteLocky
151.ru
RU-CENTER-RU90.156.201.38 (- Russian Federation) +3 A record(s) 90.156.201.75 (AS25532, - Russian Federation)
90.156.201.77 (AS25532, - Russian Federation)
90.156.201.86 (AS25532, - Russian Federation)
2016-08-11 10:59Distribution SiteLocky
fcm-makler.de
80.237.133.210 (- Germany)
2016-08-11 10:59Distribution SiteLocky
www.fasulo.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-08-11 10:59Distribution SiteLocky
sando.oboroduki.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-10 12:42Distribution SiteLocky
bfc-sas.fr
LIGNE WEB SERVICES - LWS91.216.107.44 (- France)
2016-08-10 12:42Distribution SiteLocky
user48339.vs.easily.co.uk
Ascio Technologies Inc. Denmark [...]91.194.151.38 (- United Kingdom)
2016-08-10 12:42Distribution SiteLocky
www.monzesetraslochi.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-10 12:41Distribution SiteLocky
www.italius.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-10 12:41Distribution SiteLocky
nuestraskejas.50webs.com
GODADDY.COM, LLC162.210.101.105 (- United States)
2016-08-10 12:41Distribution SiteLocky
www.rocchienoteca.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-10 12:41Distribution SiteLocky
colpi.telerete.it
TELERETE-REG217.148.123.3 (- Italy)
2016-08-10 12:41Distribution SiteLocky
hbfx.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-08-10 12:40Distribution SiteLocky
www.locgest.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-10 12:40Distribution SiteLocky
www.forestg.com
NETWORK SOLUTIONS, LLC. (n/a)
2016-08-10 12:40Distribution SiteLocky
www.xback.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-10 12:39Distribution SiteLocky
zsz_szyn.republika.pl
213.180.150.17 (- Poland)
2016-08-10 12:39Distribution SiteLocky
computekpdx.comcastbiz.net
CSC CORPORATE DOMAINS, INC.216.87.186.166 (- United States)
2016-08-10 12:39Distribution SiteLocky
helloworldfc2.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.46 (- United States)
2016-08-10 12:39Distribution SiteLocky
sibkojin.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-08-10 12:38Distribution SiteLocky
www.portuense.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-10 12:38Distribution SiteLocky
www.motoclubimperia.it
UNO-REG31.222.201.92 (- Netherlands)
2016-08-10 12:38Distribution SiteLocky
www.fastbikesusa.comcastbiz.net
CSC CORPORATE DOMAINS, INC.216.87.186.89 (- United States)
2016-08-10 12:37Distribution SiteLocky
amecie.com
TOTAL WEB SOLUTIONS LIMITED TRAD[...]194.150.252.101 (- United Kingdom)
2016-08-10 12:37Distribution SiteLocky
karisaba.dousetsu.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-10 12:37Distribution SiteLocky
shramba.50webs.com
GODADDY.COM, LLC162.210.101.22 (- United States)
2016-08-10 12:37Distribution SiteLocky
autores.ra-ma.es
217.18.161.67 (- Spain)
2016-08-10 05:45Botnet C&CLocky
arddxjkwrp.xyz
Namecheap208.100.26.234 (- United States)
2016-08-09 23:46Payment SiteCerber
unocl45trpuoefft.06j7o0.top
Eranet International Limited (n/a)
2016-08-09 18:24Payment SiteCerber
52uo5k3t73ypjije.086ux2.top
Eranet International Limited (n/a)
2016-08-09 13:53Payment SiteCerber
4kqd3hmqgptupi3p.nearlybut.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-09 11:05Distribution SiteLocky
eleksanyi.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-08-09 11:04Distribution SiteLocky
www.falciano.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:32Distribution SiteLocky
user9749.vs.easily.co.uk
Ascio Technologies Inc. Denmark [...]91.194.151.38 (- United Kingdom)
2016-08-09 10:31Distribution SiteLocky
ovomaltineforever.com.br
191.6.200.92 (- Brazil)
2016-08-09 10:31Distribution SiteLocky
sb-11037.fastdl-server.biz
PSI USA109.230.252.172 (- Germany)
2016-08-09 10:31Distribution SiteLocky
rovd.vov.ru
RU-CENTER-RU212.46.196.140 (- Russian Federation)
2016-08-09 10:31Distribution SiteLocky
www.cristinabertuzzi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-09 10:31Distribution SiteLocky
jooob.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-08-09 10:30Distribution SiteLocky
www.noema2k.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:30Distribution SiteLocky
www.bogusleek.co.uk
Register.com Inc t/a British Tel[...]209.235.144.9 (- United States)
2016-08-09 10:29Distribution SiteLocky
www.ladylinetattoo.org
Ascio Technologies, Inc. Danmark[...]81.169.145.223 (- Germany)
2016-08-09 10:28Distribution SiteLocky
www.ibcresigum.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:28Distribution SiteLocky
www.genonkoubou.jp
202.224.63.6 (- Japan)
2016-08-09 09:25Distribution SiteLocky
stemnodig.dommel.be
SCHEDOM NV / DOMMEL.COM193.109.184.81 (- Belgium)
2016-08-09 09:24Distribution SiteLocky
www.studiobrogi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-09 09:24Distribution SiteLocky
teatrdomowy.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-08-09 09:24Distribution SiteLocky
www.fliegendergaertner.at
81.19.145.43 (- Austria)
2016-08-09 09:23Distribution SiteLocky
traveltotre.in
Endurance Domains Technology Pvt[...] (n/a)
2016-08-09 09:23Distribution SiteLocky
rebolyschool.iso.karelia.ru
212.109.5.251 (- Russian Federation)
2016-08-09 09:23Distribution SiteLocky
www.prisma-srl.net
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-08-09 09:23Distribution SiteLocky
rot-solutions.com
TUCOWS DOMAINS INC.134.0.10.64 (- Spain)
2016-08-09 09:22Distribution SiteLocky
www.weingut-ettenauer.at
81.19.145.37 (- Austria)
2016-08-09 05:53Payment SiteCerber
4kqd3hmqgptupi3p.sk8r54.top
Eranet International Limited (n/a)
2016-08-09 01:23Payment SiteCerber
4kqd3hmqgptupi3p.rsi6gn.top
Eranet International Limited (n/a)
2016-08-09 00:53Botnet C&CLocky
fuuwnsv.pw
Namecheap208.100.26.234 (- United States)
2016-08-08 23:09Botnet C&CLocky
fpashgkepwtoqdjg.pw
Namecheap208.100.26.234 (- United States)
2016-08-08 23:09Botnet C&CLocky
91.200.14.139
91.200.14.139 (- Ukraine)
2016-08-08 23:09Botnet C&CLocky
185.82.216.45
185.82.216.45 (- Bulgaria)
2016-08-08 21:36Payment SiteCerber
4kqd3hmqgptupi3p.heardbids.date
Alpnames Limited (n/a)
2016-08-08 11:53Payment SiteCerber
4kqd3hmqgptupi3p.outputon.asia
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-08 11:26Distribution SiteLocky
meguriau.koiwazurai.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >