Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-16 10:44Distribution SiteLocky
ermt.ikidane.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-16 10:44Distribution SiteLocky
www.concime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]69.172.201.153 (- United States)
2016-08-16 10:44Distribution SiteLocky
testtameshi2009.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.35 (- United States)
2016-08-16 10:43Distribution SiteLocky
franzi66.50webs.com
GODADDY.COM, LLC198.23.52.96 (- United States)
2016-08-16 10:43Distribution SiteLocky
zarexbytonia.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-16 10:43Distribution SiteLocky
www.mediatoponline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 10:42Distribution SiteLocky
videoakama.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-08-16 10:42Distribution SiteLocky
stage.diabetes.bayer.in
CSC Corporate Domains, Inc. (R63[...]192.206.64.126 (- United States)
2016-08-16 10:42Distribution SiteLocky
www.gcs-crostolo.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 10:42Distribution SiteLocky
macdtoha.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-08-16 10:41Distribution SiteLocky
www.olze.info
Cronon AG81.169.145.161 (- Germany)
2016-08-16 10:41Distribution SiteLocky
www.francescomalfatti.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 08:49Payment SiteCerber
wjtqjleommc4z46i.eag72x.top
Alpnames Limited (n/a)
2016-08-16 05:32Payment SiteCerber
unocl45trpuoefft.at593l.bid
Eranet International Limited (n/a)
2016-08-16 00:53Payment SiteCerber
4kqd3hmqgptupi3p.liescale.in
Webiq Domains Solutions Pvt. Ltd[...] (n/a)
2016-08-16 00:12Payment SiteCerber
pmenboeqhyrpvomq.enanhb.bid
Eranet International Limited (n/a)
2016-08-15 17:06Payment SiteCerber
52uo5k3t73ypjije.hbd7m4.bid
Eranet International Limited (n/a)
2016-08-15 16:29Payment SiteCerber
52uo5k3t73ypjije.ooulp2.bid
Eranet International Limited (n/a)
2016-08-15 13:46Distribution SiteLocky
www.chatleather.com
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-08-15 13:44Distribution SiteLocky
www.attivita-antroposofiche-roma.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-08-15 13:44Distribution SiteLocky
www.bruciati.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-15 13:43Distribution SiteLocky
www.dbv-winterthur.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-15 13:43Distribution SiteLocky
www.anticarredodolomiti.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-15 13:34Payment SiteCerber
unocl45trpuoefft.ye4f7k.bid
Eranet International Limited (n/a)
2016-08-15 13:20Payment SiteCerber
52uo5k3t73ypjije.vor28o.bid
Eranet International Limited (n/a)
2016-08-15 12:43Payment SiteCerber
unocl45trpuoefft.eloppu.bid
Eranet International Limited (n/a)
2016-08-15 12:41Payment SiteCerber
52uo5k3t73ypjije.zd3p2g.top
Alpnames Limited (n/a)
2016-08-15 12:13Payment SiteCerber
52uo5k3t73ypjije.z8ijgn.bid
Eranet International Limited (n/a)
2016-08-15 11:42Distribution SiteLocky
kittoyakudatu.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-08-15 11:42Distribution SiteLocky
www.tecnohellas.gr
138.201.122.98 (- Germany)
2016-08-15 11:41Distribution SiteLocky
topfireart.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]162.210.101.118 (- United States)
2016-08-15 11:41Distribution SiteLocky
rondoncompany.bake-neko.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-15 11:40Distribution SiteLocky
www.carrosserie-promocar.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-08-15 11:40Distribution SiteLocky
www.bozenan.swk.vectranet.pl
OVH SAS88.156.222.94 (- Poland)
2016-08-15 11:40Distribution SiteLocky
www.scoutvda.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-15 11:39Distribution SiteLocky
devierdemuur.50webs.com
GODADDY.COM, LLC198.23.52.99 (- United States)
2016-08-15 11:18Payment SiteCerber
unocl45trpuoefft.zn9cme.bid
Eranet International Limited (n/a)
2016-08-15 10:12Distribution SiteLocky
marcinha.50webs.com
GODADDY.COM, LLC162.210.101.23 (- United States)
2016-08-15 10:11Distribution SiteLocky
www.reniero.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-08-15 10:11Distribution SiteLocky
www.vinyljazzrecords.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-15 10:11Distribution SiteLocky
xn--kukuk-gstrow-jlb.de
81.169.145.80 (- Germany)
2016-08-15 10:10Distribution SiteLocky
marimo1963430.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-08-15 10:09Distribution SiteLocky
www.pescatoridelpontile.it
TOPHOST-REG178.20.112.144 (- Italy)
2016-08-15 10:09Distribution SiteLocky
orquestracaravan.com
REGISTER.IT SPA81.88.57.70 (- Italy)
2016-08-15 10:08Distribution SiteLocky
mondialmt2.hi2.ro
ICI - ROTLD (n/a)
2016-08-15 10:07Distribution SiteLocky
www.lancerortho.com
NETWORK SOLUTIONS, LLC.209.240.146.111 (- United States)
2016-08-15 08:54Payment SiteCerber
pmenboeqhyrpvomq.gnuvaw.bid
Eranet International Limited (n/a)
2016-08-15 06:42Payment SiteCerber
unocl45trpuoefft.9lx4s6.bid
Eranet International Limited (n/a)
2016-08-15 06:21Payment SiteCerber
52uo5k3t73ypjije.snwy26.top
Alpnames Limited (n/a)
2016-08-15 04:02Payment SiteCerber
unocl45trpuoefft.sp4o1t.bid
Eranet International Limited (n/a)
2016-08-15 03:25Payment SiteCerber
unocl45trpuoefft.lk0bzc.top
Eranet International Limited (n/a)
2016-08-14 21:18Payment SiteCerber
unocl45trpuoefft.knowhands.us
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-14 20:59Payment SiteCerber
52uo5k3t73ypjije.hv42mo.bid
Eranet International Limited (n/a)
2016-08-14 19:33Payment SiteCerber
52uo5k3t73ypjije.ep493u.top
Eranet International Limited (n/a)
2016-08-14 18:13Payment SiteCerber
52uo5k3t73ypjije.dkro3u.top
Eranet International Limited (n/a)
2016-08-14 14:34Payment SiteCerber
52uo5k3t73ypjije.eoivrm.bid
Eranet International Limited (n/a)
2016-08-14 13:54Payment SiteCerber
52uo5k3t73ypjije.u2r7tm.bid
Eranet International Limited (n/a)
2016-08-14 13:21Payment SiteCerber
52uo5k3t73ypjije.xtppp8.bid
Eranet International Limited (n/a)
2016-08-14 11:56Payment SiteCerber
52uo5k3t73ypjije.7asel7.top
Eranet International Limited (n/a)
2016-08-14 11:13Payment SiteCerber
52uo5k3t73ypjije.5zxii2.bid
Eranet International Limited (n/a)
2016-08-14 10:12Payment SiteCerber
unocl45trpuoefft.086ux2.top
Eranet International Limited (n/a)
2016-08-14 09:57Payment SiteCerber
unocl45trpuoefft.rie9py.bid
Eranet International Limited (n/a)
2016-08-14 07:24Payment SiteCerber
52uo5k3t73ypjije.gnuvaw.bid
Eranet International Limited (n/a)
2016-08-14 06:59Payment SiteCerber
unocl45trpuoefft.givxuf.bid
Eranet International Limited (n/a)
2016-08-14 06:41Payment SiteCerber
unocl45trpuoefft.uaol08.bid
Eranet International Limited (n/a)
2016-08-14 04:41Payment SiteCerber
52uo5k3t73ypjije.vt3dg6.bid
Eranet International Limited (n/a)
2016-08-14 02:49Payment SiteCerber
52uo5k3t73ypjije.sx90yk.bid
Eranet International Limited (n/a)
2016-08-14 00:46Payment SiteCerber
unocl45trpuoefft.9u3iy1.top
Eranet International Limited (n/a)
2016-08-13 23:03Payment SiteCerber
52uo5k3t73ypjije.en3oyw.bid
Eranet International Limited (n/a)
2016-08-13 22:34Payment SiteCerber
unocl45trpuoefft.meetsface.win
Alpnames Limited (n/a)
2016-08-13 21:48Payment SiteCerber
52uo5k3t73ypjije.7wrwp4.top
Eranet International Limited (n/a)
2016-08-13 18:03Payment SiteCerber
52uo5k3t73ypjije.gtnfgj.top
Eranet International Limited (n/a)
2016-08-13 17:32Payment SiteCerber
52uo5k3t73ypjije.ywszbe.bid
Eranet International Limited (n/a)
2016-08-13 14:26Botnet C&CLocky
gsmdqrmqddqtuv.xyz
Gandi SAS54.67.27.43 (- United States)
2016-08-13 12:48Payment SiteCerber
pmenboeqhyrpvomq.y7fjr4.bid
Eranet International Limited (n/a)
2016-08-13 10:28Payment SiteCerber
52uo5k3t73ypjije.0nyi6l.bid
Eranet International Limited (n/a)
2016-08-13 09:55Payment SiteCerber
52uo5k3t73ypjije.r2ok0b.bid
Eranet International Limited (n/a)
2016-08-13 09:01Payment SiteCerber
52uo5k3t73ypjije.uw7w05.bid
Eranet International Limited (n/a)
2016-08-13 08:40Distribution SiteLocky
digiwebstore.fr
OVH213.186.33.19 (- France)
2016-08-12 15:51Payment SiteCerber
52uo5k3t73ypjije.lrraca.bid
Eranet International Limited (n/a)
2016-08-12 13:22Payment SiteCerber
pmenboeqhyrpvomq.0nyi6l.bid
Eranet International Limited (n/a)
2016-08-12 13:21Distribution SiteLocky
portraitstaffa.de
89.110.129.54 (- Germany)
2016-08-12 13:21Distribution SiteLocky
sportpferde-weihmayer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-12 13:21Distribution SiteLocky
www.bitupont.hu
5.9.43.15 (- Germany)
2016-08-12 13:21Distribution SiteLocky
files.zdaspb.ru
R01-RU80.64.104.213 (- Russian Federation)
2016-08-12 13:20Distribution SiteLocky
www.herinvest.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-12 13:20Distribution SiteLocky
www.milleniumbar.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-12 13:19Distribution SiteLocky
muteofficial.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
broda.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-08-12 13:19Distribution SiteLocky
www.ceccosport.it
TISCALIDOMAIN-REG141.8.224.153 (- Switzerland)
2016-08-12 13:19Distribution SiteLocky
scom2.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
kolkhoz.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-12 13:19Distribution SiteLocky
studiocorrado.org
Ascio Technologies, Inc. Danmark[...]79.98.45.16 (- Italy)
2016-08-12 13:18Distribution SiteLocky
bonmoment.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-08-12 13:17Distribution SiteLocky
www.meteoerba.it
TISCALIDOMAIN-REG31.11.34.46 (- Italy)
2016-08-12 13:17Distribution SiteLocky
birthday-cards.50webs.com
GODADDY.COM, LLC162.210.101.23 (- United States)
2016-08-12 13:17Distribution SiteLocky
www.hi-segno.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-12 13:16Distribution SiteLocky
tianooze.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.41 (- United States)
2016-08-12 13:16Distribution SiteLocky
dopelx.com
REGISTER.IT SPA81.88.57.70 (- Italy)
2016-08-12 13:16Distribution SiteLocky
www.nikawilliam.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >