Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-08 11:26Distribution SiteLocky
j-morin.fr
AMEN / Agence des Médias Numér[...]81.88.57.68 (- Italy)
2016-08-08 11:26Distribution SiteLocky
www.gonimar.onored.com
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-08-08 11:26Distribution SiteLocky
lunaparkperugia.it
REGISTER-REG185.2.4.67 (- Italy)
2016-08-08 11:25Distribution SiteLocky
www.pasquaautonoleggi.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:25Distribution SiteLocky
www.www.www.www.lappeenrannankalevalaisetnaiset.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-08 11:25Distribution SiteLocky
zsnbystre.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-08-08 11:25Distribution SiteLocky
expresso-sf.com.br
186.202.153.171 (- Brazil)
2016-08-08 11:25Distribution SiteLocky
www.giuni.it
REGISTER-REG80.91.55.42 (- Italy)
2016-08-08 11:25Distribution SiteLocky
yosi.sa-suke.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-08 11:24Distribution SiteLocky
w47hqoozb.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-08 11:24Distribution SiteLocky
www.luigi-varsalona.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-08-08 11:24Distribution SiteLocky
bork-sh.vitebsk.by
Open Contact, Ltd82.209.200.9 (- Belarus)
2016-08-08 11:24Distribution SiteLocky
nikiforov.dax.ru
RU-CENTER-RU212.46.196.134 (- Russian Federation)
2016-08-08 11:24Distribution SiteLocky
www.azetapiemonte.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:24Distribution SiteLocky
keramago.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.35 (- United States)
2016-08-08 11:24Distribution SiteLocky
del-sieradz.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-08-08 11:24Distribution SiteLocky
pogotowie.pcserwis.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-08 11:23Distribution SiteLocky
www.telsiel.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-08 11:23Distribution SiteLocky
haha8.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-08-08 11:23Distribution SiteLocky
www.lafoce-nonsolovino.it
UNO-REG82.215.163.133 (- Italy)
2016-08-08 11:23Distribution SiteLocky
jk1109.cafe24.com
HANILNETWORKS CO., LTD.116.126.143.40 (- Korea)
2016-08-08 11:23Distribution SiteLocky
allrinku.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-08-08 11:23Distribution SiteLocky
www.plancho.de
81.169.145.77 (- Germany)
2016-08-08 11:22Distribution SiteLocky
nflfootballpool.ca
In2net Network Inc.108.60.15.36 (- Canada)
2016-08-08 11:22Distribution SiteLocky
armada-kar.nichost.ru
RU-CENTER-RU195.208.1.115 (- Russian Federation)
2016-08-08 11:22Distribution SiteLocky
expresso-sf.com.br
186.202.153.171 (- Brazil)
2016-08-08 11:22Distribution SiteLocky
fieldtennis.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.34 (- United States)
2016-08-08 11:21Distribution SiteLocky
alpeteglio.it
TISCALIDOMAIN-REG62.149.128.151 (- Italy) +7 A record(s) 62.149.128.154 (AS31034, - Italy)
62.149.128.157 (AS31034, - Italy)
62.149.128.160 (AS31034, - Italy)
62.149.128.163 (AS31034, - Italy)
62.149.128.166 (AS31034, - Italy)
62.149.128.72 (AS31034, - Italy)
62.149.128.74 (AS31034, - Italy)
2016-08-08 11:21Distribution SiteLocky
www.acansorga.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:05Distribution SiteLocky
www.azetapiemonte.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:05Distribution SiteLocky
alpeteglio.it
TISCALIDOMAIN-REG62.149.128.151 (- Italy) +7 A record(s) 62.149.128.154 (AS31034, - Italy)
62.149.128.157 (AS31034, - Italy)
62.149.128.160 (AS31034, - Italy)
62.149.128.163 (AS31034, - Italy)
62.149.128.166 (AS31034, - Italy)
62.149.128.72 (AS31034, - Italy)
62.149.128.74 (AS31034, - Italy)
2016-08-08 11:05Distribution SiteLocky
armada-kar.nichost.ru
RU-CENTER-RU195.208.1.115 (- Russian Federation)
2016-08-08 11:05Distribution SiteLocky
pogotowie.pcserwis.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-08 11:04Distribution SiteLocky
fieldtennis.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.34 (- United States)
2016-08-08 11:04Distribution SiteLocky
yosi.sa-suke.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-08 11:04Distribution SiteLocky
www.giuni.it
REGISTER-REG80.91.55.42 (- Italy)
2016-08-08 11:03Distribution SiteLocky
www.gonimar.onored.com
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-08-07 19:22Payment SiteCerber
52uo5k3t73ypjije.x3nnbd.top
Eranet International Limited (n/a)
2016-08-07 18:28Payment SiteCerber
4kqd3hmqgptupi3p.dkrie7.top
Eranet International Limited (n/a)
2016-08-07 18:16Payment SiteCerber
52uo5k3t73ypjije.8i8dt4.top
Eranet International Limited (n/a)
2016-08-07 15:41Payment SiteCerber
pmenboeqhyrpvomq.hwh75t.top
Eranet International Limited (n/a)
2016-08-07 10:30Payment SiteCerber
4kqd3hmqgptupi3p.homehuge.top
Alpnames Limited (n/a)
2016-08-07 09:45Payment SiteCerber
4kqd3hmqgptupi3p.goshare.red
Alpnames Limited (n/a)
2016-08-07 06:52Payment SiteCerber
4kqd3hmqgptupi3p.needmight.win
Alpnames Limited (n/a)
2016-08-07 05:31Payment SiteCerber
4kqd3hmqgptupi3p.pap44w.top
Eranet International Limited (n/a)
2016-08-07 01:57Payment SiteCerber
52uo5k3t73ypjije.rgdk0u.top
Eranet International Limited (n/a)
2016-08-07 01:01Payment SiteCerber
pmenboeqhyrpvomq.e6in0v.top
Eranet International Limited (n/a)
2016-08-06 21:31Botnet C&CLocky
fmirgordkhig.xyz
Namecheap208.100.26.234 (- United States)
2016-08-06 20:50Payment SiteCerber
unocl45trpuoefft.wz139z.top
Eranet International Limited (n/a)
2016-08-06 15:19Payment SiteCerber
4kqd3hmqgptupi3p.stopsage.gdn
AlpNames Limited (n/a)
2016-08-06 15:04Payment SiteCerber
52uo5k3t73ypjije.b8ll6n.top
Eranet International Limited (n/a)
2016-08-06 10:44Payment SiteCerber
4kqd3hmqgptupi3p.6h03gw.top
Eranet International Limited (n/a)
2016-08-06 07:57Botnet C&CLocky
ecjfdaqmmyusxntwl.work
Enom208.100.26.234 (- United States)
2016-08-06 06:56Payment SiteCerber
unocl45trpuoefft.frn62e.top
Eranet International Limited (n/a)
2016-08-06 04:25Payment SiteCerber
unocl45trpuoefft.dwkofh.top
Alpnames Limited (n/a)
2016-08-05 22:01Payment SiteCerber
52uo5k3t73ypjije.4oyhvh.top
Eranet International Limited (n/a)
2016-08-05 20:58Payment SiteCerber
4kqd3hmqgptupi3p.nextask.loan
Alpnames Limited (n/a)
2016-08-05 19:39Payment SiteCerber
unocl45trpuoefft.r21wmw.top
Eranet International Limited (n/a)
2016-08-05 17:17Payment SiteCerber
pmenboeqhyrpvomq.wrd4fo.top
Eranet International Limited (n/a)
2016-08-05 17:15Payment SiteCerber
52uo5k3t73ypjije.11pmnz.top
Eranet International Limited (n/a)
2016-08-05 13:46Payment SiteCerber
pmenboeqhyrpvomq.ibngww.top
Eranet International Limited (n/a)
2016-08-05 12:03Distribution SiteLocky
chanen1.com
GODADDY.COM, LLC208.106.239.119 (- United States)
2016-08-05 12:03Distribution SiteLocky
chicharito14.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-05 12:03Distribution SiteLocky
ishinomakicatering.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-08-05 12:03Distribution SiteLocky
tiefthalerhof.it
GIF-REG89.31.72.167 (- Italy)
2016-08-05 12:03Distribution SiteLocky
spkoszewo.strefa.pl
Grupa Interia.pl sp. z o.o. sp. [...]217.74.66.167 (- Poland)
2016-08-05 12:03Distribution SiteLocky
seagullob.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.38 (- United States)
2016-08-05 12:02Distribution SiteLocky
peloteros1.50webs.com
GODADDY.COM, LLC162.210.101.113 (- United States)
2016-08-05 12:02Distribution SiteLocky
esting.es
176.31.61.108 (- France)
2016-08-05 12:02Distribution SiteLocky
commentaborderunefille.fr
ONLINE SAS213.186.33.4 (- France)
2016-08-05 12:02Distribution SiteLocky
www.robertogori.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.isolatelematica.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.hotellaconchiglialmd.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]34.224.252.61 (- United States) +3 A record(s) 52.203.74.207 (AS14618, - United States)
52.86.14.133 (AS14618, - United States)
54.164.68.110 (AS14618, - United States)
2016-08-05 12:02Distribution SiteLocky
www.netsyscom.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.leonardopivi.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
www.filix.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-05 12:02Distribution SiteLocky
naturopathiesante.fr
NUXIT195.114.18.164 (- France)
2016-08-05 12:02Distribution SiteLocky
www.dedycker.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-05 12:01Distribution SiteLocky
nickvero.3x.ro
ICI - ROTLD89.42.39.160 (- Romania)
2016-08-05 12:01Distribution SiteLocky
nakip.com.ua
(n/a)
2016-08-05 12:01Distribution SiteLocky
heidechopper.de
46.30.213.113 (- Denmark)
2016-08-05 12:01Distribution SiteLocky
osarunoyakata.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.35 (- United States)
2016-08-05 12:01Distribution SiteLocky
drenkelford.net
KEY-SYSTEMS GMBH (n/a)
2016-08-05 12:01Distribution SiteLocky
rbrandi.interfree.it
REGISTER-REG80.91.55.51 (- Italy)
2016-08-05 12:00Distribution SiteLocky
portalcerrado.com.br
187.45.193.170 (- Brazil)
2016-08-05 12:00Distribution SiteLocky
listanegra.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-08-05 08:47Payment SiteCerber
unocl45trpuoefft.rslh9a.top
Eranet International Limited (n/a)
2016-08-05 07:20Payment SiteCerber
4kqd3hmqgptupi3p.43wjor.top
Eranet International Limited (n/a)
2016-08-05 05:16Payment SiteCerber
52uo5k3t73ypjije.pap44w.top
Eranet International Limited (n/a)
2016-08-05 05:03Payment SiteCerber
pmenboeqhyrpvomq.4pzclh.top
Eranet International Limited (n/a)
2016-08-05 02:14Payment SiteCerber
unocl45trpuoefft.ibngww.top
Eranet International Limited (n/a)
2016-08-05 00:36Payment SiteCerber
52uo5k3t73ypjije.r21wmw.top
Eranet International Limited (n/a)
2016-08-04 23:04Payment SiteCerber
52uo5k3t73ypjije.4n592s.top
Alpnames Limited (n/a)
2016-08-04 22:19Payment SiteCerber
52uo5k3t73ypjije.gpy3tc.top
Eranet International Limited (n/a)
2016-08-04 22:16Payment SiteCerber
52uo5k3t73ypjije.zda7bk.top
Eranet International Limited (n/a)
2016-08-04 21:41Payment SiteCerber
52uo5k3t73ypjije.8a0sf6.top
Eranet International Limited (n/a)
2016-08-04 21:23Payment SiteCerber
unocl45trpuoefft.eyohd2.top
Eranet International Limited (n/a)
2016-08-04 18:24Payment SiteCerber
unocl45trpuoefft.0vgu64.top
Eranet International Limited (n/a)
2016-08-04 17:09Payment SiteCerber
unocl45trpuoefft.hynwbs.top
Eranet International Limited (n/a)
2016-08-04 17:05Payment SiteCerber
unocl45trpuoefft.pap44w.top
Eranet International Limited (n/a)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >