Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-05-18 12:06Payment SiteCerber
p27dokhpz2n7nvgr.1mfdt8.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-18 06:17Payment SiteCerber
hjhqmbxyinislkkt.1pxbfh.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-17 16:53Payment SiteCerber
hjhqmbxyinislkkt.13qgdd.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-17 11:14Botnet C&CSage
mbfce24rgn65bx3g.je9mlz.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2017-05-17 10:58Botnet C&CLocky
eoalsoub.pw
Namecheap208.100.26.251 (- United States)
2017-05-17 09:15Botnet C&CLocky
uhjxayhpisr.pw
Namecheap208.100.26.251 (- United States)
2017-05-17 08:38Botnet C&CLocky
cpawdrtxfjkwrkkl.pw
Namecheap208.100.26.251 (- United States)
2017-05-17 08:13Botnet C&CLocky
eypdxikxsufj.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-17 08:13Botnet C&CLocky
bxlrywuuobje.pw
Namecheap208.100.26.251 (- United States)
2017-05-17 08:07Botnet C&CLocky
sgrnhwyqxdk.pw
Namecheap208.100.26.251 (- United States)
2017-05-17 07:49Botnet C&CLocky
dvmbtgoobxcc.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-13 18:20Payment SiteCerber
hjhqmbxyinislkkt.1aqq5k.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-13 18:20Payment SiteCerber
hjhqmbxyinislkkt.1aqq5k.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-12 23:17Botnet C&CLocky
ttoyqvq.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 23:17Botnet C&CLocky
mxyfasm.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 23:17Botnet C&CLocky
mwqwverayognn.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 23:17Botnet C&CLocky
ibtfqftkgi.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 23:17Botnet C&CLocky
fuuasvhpsvuihlnje.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 20:24Payment SiteCerber
hjhqmbxyinislkkt.15mwt4.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-12 18:59Botnet C&CLocky
5.79.106.152
5.79.106.152 (- Netherlands)
2017-05-12 15:36Botnet C&CLocky
iqfyujpvubwawc.pw
Namecheap208.100.26.251 (- United States)
2017-05-12 15:36Botnet C&CLocky
cpyrltela.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 15:36Botnet C&CLocky
clhyelmwnuqhigecp.pw
Namecheap141.8.226.58 (- Switzerland)
2017-05-12 11:59Payment SiteCerber
p27dokhpz2n7nvgr.1mfakx.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-11 23:04Payment SiteCerber
hjhqmbxyinislkkt.1kw51p.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-10 08:35Payment SiteCerber
p27dokhpz2n7nvgr.1jyhqc.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-10 08:18Payment SiteCerber
hjhqmbxyinislkkt.1lqrja.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-09 10:57Payment SiteCerber
hjhqmbxyinislkkt.17kc8y.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-09 10:09Distribution SiteCerber
4rebaopfgrewe.top
Eranet International Limited (n/a)
2017-05-08 20:10Payment SiteCerber
hjhqmbxyinislkkt.13ydzv.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-07 21:00Payment SiteCerber
p27dokhpz2n7nvgr.1hkjl3.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-07 20:18Payment SiteCerber
hjhqmbxyinislkkt.1fgsmc.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-07 00:49Payment SiteCerber
hjhqmbxyinislkkt.12m58x.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-06 10:56Payment SiteCerber
p27dokhpz2n7nvgr.16nxpn.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-06 10:23Botnet C&CSage
mbfce24rgn65bx3g.eho23d.net
PAKNIC (PRIVATE) LIMITED (n/a)
2017-05-06 06:52Payment SiteCerber
hjhqmbxyinislkkt.127axt.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-05 15:42Payment SiteCerber
p27dokhpz2n7nvgr.133chr.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-05 10:56Distribution SiteCerber
37kddsserrt.xyz
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-05-05 10:56Distribution SiteCerber
poimoiyreque5.pw
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-05-05 10:56Distribution SiteCerber
poimoiyreque5.pw
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-05-04 16:24Payment SiteTorrentLocker
2ymh2gnnbg6pgq2r.gremsot.pl
InternetX GmbH (n/a)
2017-05-04 12:29Distribution SiteCerber
jhdgh.club
NameCheap, Inc. (n/a)
2017-05-04 10:37Payment SiteCerber
hjhqmbxyinislkkt.1khwro.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-04 09:53Payment SiteCerber
p27dokhpz2n7nvgr.17gvad.top
Eranet International Limited127.0.0.1 (n/a)
2017-05-04 09:06Payment SiteCerber
hjhqmbxyinislkkt.1mqvsc.top
Eranet International Limited (n/a)
2017-05-04 01:14Payment SiteCerber
hjhqmbxyinislkkt.1gvyo8.top
Eranet International Limited (n/a)
2017-05-02 10:26Payment SiteCerber
p27dokhpz2n7nvgr.1jzmjr.top
Eranet International Limited (n/a)
2017-05-02 03:11Payment SiteCerber
hjhqmbxyinislkkt.13bcem.top
Eranet International Limited (n/a)
2017-05-01 17:14Payment SiteCerber
hjhqmbxyinislkkt.1fzjn3.top
Eranet International Limited (n/a)
2017-05-01 14:36Payment SiteCerber
p27dokhpz2n7nvgr.12hxjv.top
Eranet International Limited (n/a)
2017-05-01 12:33Payment SiteTorrentLocker
2ymh2gnnbg6pgq2r.winregion.tw
PSI-USA, Inc. (n/a)
2017-04-30 17:11Botnet C&CLocky
91.201.202.232
91.201.202.232 (- Ukraine)
2017-04-30 04:52Payment SiteCerber
p27dokhpz2n7nvgr.1pbfky.top
Eranet International Limited (n/a)
2017-04-29 23:44Payment SiteCerber
p27dokhpz2n7nvgr.1wmvk2.top
Eranet International Limited (n/a)
2017-04-29 22:19Payment SiteCerber
hjhqmbxyinislkkt.15e8hv.top
Eranet International Limited (n/a)
2017-04-29 17:35Payment SiteCerber
hjhqmbxyinislkkt.19xvyd.top
Eranet International Limited (n/a)
2017-04-29 08:03Payment SiteCerber
hjhqmbxyinislkkt.1mwvgh.top
Eranet International Limited (n/a)
2017-04-28 16:59Payment SiteCerber
p27dokhpz2n7nvgr.1kyjw7.top
Eranet International Limited (n/a)
2017-04-28 00:55Botnet C&CLocky
185.127.25.176
185.127.25.176 (- Russian Federation)
2017-04-27 23:33Payment SiteCerber
hjhqmbxyinislkkt.1fnjrj.top
Eranet International Limited (n/a)
2017-04-27 23:31Payment SiteCerber
p27dokhpz2n7nvgr.17u2yg.top
Eranet International Limited (n/a)
2017-04-27 18:28Payment SiteCerber
hjhqmbxyinislkkt.1j43kf.top
Eranet International Limited (n/a)
2017-04-27 18:12Payment SiteCerber
hjhqmbxyinislkkt.1fygsg.top
Eranet International Limited (n/a)
2017-04-27 10:46Payment SiteCerber
p27dokhpz2n7nvgr.1nprob.top
Eranet International Limited (n/a)
2017-04-27 08:14Payment SiteCerber
p27dokhpz2n7nvgr.1evjph.top
Eranet International Limited (n/a)
2017-04-25 12:08Botnet C&CLocky
188.120.239.230
188.120.239.230 (- Russian Federation)
2017-04-23 11:22Payment SiteCerber
hjhqmbxyinislkkt.1c1ajf.top
Eranet International Limited (n/a)
2017-04-22 10:41Payment SiteCerber
p27dokhpz2n7nvgr.17m14u.top
Eranet International Limited (n/a)
2017-04-21 22:12Payment SiteCerber
hjhqmbxyinislkkt.1mee2x.top
Eranet International Limited (n/a)
2017-04-20 22:12Payment SiteCerber
p27dokhpz2n7nvgr.1m3xsy.top
Eranet International Limited (n/a)
2017-04-20 21:11Payment SiteCerber
hjhqmbxyinislkkt.19hj4f.top
Eranet International Limited (n/a)
2017-04-20 10:03Payment SiteCerber
hjhqmbxyinislkkt.12bxp9.top
Eranet International Limited (n/a)
2017-04-20 09:37Payment SiteCerber
p27dokhpz2n7nvgr.1jpb8w.top
Eranet International Limited (n/a)
2017-04-20 05:10Payment SiteCerber
hjhqmbxyinislkkt.12zucf.top
Eranet International Limited (n/a)
2017-04-20 02:37Payment SiteCerber
p27dokhpz2n7nvgr.12smak.top
Eranet International Limited (n/a)
2017-04-17 13:50Payment SiteCerber
hjhqmbxyinislkkt.1cnkik.top
Eranet International Limited (n/a)
2017-04-17 05:13Payment SiteCerber
hjhqmbxyinislkkt.1ntyds.top
Eranet International Limited (n/a)
2017-04-17 01:59Payment SiteCerber
p27dokhpz2n7nvgr.1ms2rx.top
Eranet International Limited (n/a)
2017-04-12 01:27Payment SiteCerber
hjhqmbxyinislkkt.1npg9s.top
Eranet International Limited (n/a)
2017-04-09 06:51Payment SiteCerber
p27dokhpz2n7nvgr.1nhkou.top
Eranet International Limited (n/a)
2017-04-07 00:53Payment SiteCerber
p27dokhpz2n7nvgr.1a7wnt.top
Eranet International Limited (n/a)
2017-04-04 08:13Payment SiteCerber
hjhqmbxyinislkkt.1fy93v.top
Eranet International Limited (n/a)
2017-04-03 17:49Payment SiteCerber
p27dokhpz2n7nvgr.1czh7o.top
Eranet International Limited (n/a)
2017-03-31 17:50Distribution SiteCerber
www.chromehakc.top
Eranet International Limited (n/a)
2017-03-31 17:50Distribution SiteCerber
www.watherfka.top
Eranet International Limited (n/a)
2017-03-31 17:50Distribution SiteCerber
www.newsectorbs.top
Eranet International Limited (n/a)
2017-03-31 11:28Payment SiteCerber
hjhqmbxyinislkkt.13kn4l.top
Eranet International Limited (n/a)
2017-03-31 06:20Distribution SiteTorrentLocker
kolestod.pl
EPAG Domainservices GmbHn/a
2017-03-30 16:33Botnet C&CLocky
91.234.34.98
91.234.34.98 (- Ukraine)
2017-03-30 15:13Botnet C&CPayCrypt
boosterprize.biz
NAMECHEAP, INC.198.144.121.78 (- Belize)
2017-03-30 13:14Distribution SiteTorrentLocker
polsetk.pl
EPAG Domainservices GmbH (n/a)
2017-03-29 21:48Payment SiteCerber
hjhqmbxyinislkkt.14klmz.top
Eranet International Limited (n/a)
2017-03-29 06:24Payment SiteCerber
p27dokhpz2n7nvgr.1hpvzl.top
Eranet International Limited (n/a)
2017-03-28 09:27Distribution SiteTorrentLocker
lightpool.pl
EPAG Domainservices GmbH (n/a)
2017-03-28 09:25Distribution SiteTorrentLocker
whitedogs.pl
InternetX GmbH (n/a)
2017-03-28 02:59Payment SiteCerber
hjhqmbxyinislkkt.1cdqfv.top
Eranet International Limited (n/a)
2017-03-27 14:19Distribution SiteTorrentLocker
generalsn.pl
InternetX GmbH (n/a)
2017-03-27 14:16Distribution SiteTorrentLocker
dinamoon.pl
InternetX GmbH51.68.142.13 (- United Kingdom)
2017-03-27 14:13Distribution SiteTorrentLocker
horestn.pl
InternetX GmbH (n/a)
2017-03-27 14:12Distribution SiteTorrentLocker
fatflat.tw
PSI-USA, Inc. (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >