Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-10 12:39Distribution SiteLocky
sibkojin.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-08-10 12:38Distribution SiteLocky
www.portuense.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-10 12:38Distribution SiteLocky
www.motoclubimperia.it
UNO-REG31.222.201.92 (- Netherlands)
2016-08-10 12:38Distribution SiteLocky
www.fastbikesusa.comcastbiz.net
CSC CORPORATE DOMAINS, INC.216.87.186.89 (- United States)
2016-08-10 12:37Distribution SiteLocky
amecie.com
TOTAL WEB SOLUTIONS LIMITED TRAD[...]194.150.252.101 (- United Kingdom)
2016-08-10 12:37Distribution SiteLocky
karisaba.dousetsu.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-10 12:37Distribution SiteLocky
shramba.50webs.com
GODADDY.COM, LLC162.210.101.22 (- United States)
2016-08-10 12:37Distribution SiteLocky
autores.ra-ma.es
217.18.161.67 (- Spain)
2016-08-10 05:45Botnet C&CLocky
arddxjkwrp.xyz
Namecheap208.100.26.234 (- United States)
2016-08-09 23:46Payment SiteCerber
unocl45trpuoefft.06j7o0.top
Eranet International Limited (n/a)
2016-08-09 18:24Payment SiteCerber
52uo5k3t73ypjije.086ux2.top
Eranet International Limited (n/a)
2016-08-09 13:53Payment SiteCerber
4kqd3hmqgptupi3p.nearlybut.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-09 11:05Distribution SiteLocky
eleksanyi.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-08-09 11:04Distribution SiteLocky
www.falciano.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:32Distribution SiteLocky
user9749.vs.easily.co.uk
Ascio Technologies Inc. Denmark [...]91.194.151.38 (- United Kingdom)
2016-08-09 10:31Distribution SiteLocky
ovomaltineforever.com.br
(n/a)
2016-08-09 10:31Distribution SiteLocky
sb-11037.fastdl-server.biz
PSI USA109.230.252.172 (- Germany)
2016-08-09 10:31Distribution SiteLocky
rovd.vov.ru
RU-CENTER-RU212.46.196.140 (- Russian Federation)
2016-08-09 10:31Distribution SiteLocky
www.cristinabertuzzi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.44 (- Italy)
2016-08-09 10:31Distribution SiteLocky
jooob.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-08-09 10:30Distribution SiteLocky
www.noema2k.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:30Distribution SiteLocky
www.bogusleek.co.uk
Register.com Inc t/a British Tel[...]209.235.144.9 (- United States)
2016-08-09 10:29Distribution SiteLocky
www.ladylinetattoo.org
Ascio Technologies, Inc. Danmark[...]81.169.145.223 (- Germany)
2016-08-09 10:28Distribution SiteLocky
www.ibcresigum.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-09 10:28Distribution SiteLocky
www.genonkoubou.jp
(n/a)
2016-08-09 09:25Distribution SiteLocky
stemnodig.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-08-09 09:24Distribution SiteLocky
www.studiobrogi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.39 (- Italy)
2016-08-09 09:24Distribution SiteLocky
teatrdomowy.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-08-09 09:24Distribution SiteLocky
www.fliegendergaertner.at
81.19.145.43 (- Austria)
2016-08-09 09:23Distribution SiteLocky
traveltotre.in
Endurance Domains Technology Pvt[...] (n/a)
2016-08-09 09:23Distribution SiteLocky
rebolyschool.iso.karelia.ru
RU-CENTER-RU212.109.5.251 (- Russian Federation)
2016-08-09 09:23Distribution SiteLocky
www.prisma-srl.net
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-08-09 09:23Distribution SiteLocky
rot-solutions.com
TUCOWS DOMAINS INC.134.0.10.64 (- Spain)
2016-08-09 09:22Distribution SiteLocky
www.weingut-ettenauer.at
81.19.145.37 (- Austria)
2016-08-09 05:53Payment SiteCerber
4kqd3hmqgptupi3p.sk8r54.top
Eranet International Limited (n/a)
2016-08-09 01:23Payment SiteCerber
4kqd3hmqgptupi3p.rsi6gn.top
Eranet International Limited (n/a)
2016-08-09 00:53Botnet C&CLocky
fuuwnsv.pw
Namecheap208.100.26.234 (- United States)
2016-08-08 23:09Botnet C&CLocky
fpashgkepwtoqdjg.pw
Namecheap208.100.26.234 (- United States)
2016-08-08 23:09Botnet C&CLocky
91.200.14.139
91.200.14.139 (- Ukraine)
2016-08-08 23:09Botnet C&CLocky
185.82.216.45
185.82.216.45 (- Bulgaria)
2016-08-08 21:36Payment SiteCerber
4kqd3hmqgptupi3p.heardbids.date
Alpnames Limited (n/a)
2016-08-08 11:53Payment SiteCerber
4kqd3hmqgptupi3p.outputon.asia
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-08 11:26Distribution SiteLocky
meguriau.koiwazurai.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-08 11:26Distribution SiteLocky
j-morin.fr
AMEN / Agence des Médias Numér[...] (n/a)
2016-08-08 11:26Distribution SiteLocky
www.gonimar.onored.com
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-08-08 11:26Distribution SiteLocky
lunaparkperugia.it
REGISTER-REG185.2.4.67 (- Italy)
2016-08-08 11:25Distribution SiteLocky
www.pasquaautonoleggi.it
TISCALIDOMAIN-REG213.205.38.26 (- Italy)
2016-08-08 11:25Distribution SiteLocky
www.www.www.www.lappeenrannankalevalaisetnaiset.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-08 11:25Distribution SiteLocky
zsnbystre.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-08-08 11:25Distribution SiteLocky
expresso-sf.com.br
186.202.153.171 (- Brazil)
2016-08-08 11:25Distribution SiteLocky
www.giuni.it
REGISTER-REG80.91.55.42 (- Italy)
2016-08-08 11:25Distribution SiteLocky
yosi.sa-suke.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-08 11:24Distribution SiteLocky
w47hqoozb.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-08 11:24Distribution SiteLocky
www.luigi-varsalona.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-08-08 11:24Distribution SiteLocky
bork-sh.vitebsk.by
Open Contact, Ltd82.209.200.9 (- Belarus)
2016-08-08 11:24Distribution SiteLocky
nikiforov.dax.ru
RU-CENTER-RU212.46.196.134 (- Russian Federation)
2016-08-08 11:24Distribution SiteLocky
www.azetapiemonte.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:24Distribution SiteLocky
keramago.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.45 (- United States)
2016-08-08 11:24Distribution SiteLocky
del-sieradz.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-08-08 11:24Distribution SiteLocky
pogotowie.pcserwis.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-08 11:23Distribution SiteLocky
www.telsiel.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.39 (- Italy)
2016-08-08 11:23Distribution SiteLocky
haha8.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.136 (- United States)
2016-08-08 11:23Distribution SiteLocky
www.lafoce-nonsolovino.it
UNO-REG62.210.27.154 (- France)
2016-08-08 11:23Distribution SiteLocky
jk1109.cafe24.com
HANILNETWORKS CO., LTD.116.126.143.40 (- Korea)
2016-08-08 11:23Distribution SiteLocky
allrinku.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-08-08 11:23Distribution SiteLocky
www.plancho.de
81.169.145.77 (- Germany)
2016-08-08 11:22Distribution SiteLocky
nflfootballpool.ca
In2net Network Inc.108.60.15.36 (- Canada)
2016-08-08 11:22Distribution SiteLocky
armada-kar.nichost.ru
RU-CENTER-RU (n/a)
2016-08-08 11:22Distribution SiteLocky
expresso-sf.com.br
186.202.153.171 (- Brazil)
2016-08-08 11:22Distribution SiteLocky
fieldtennis.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.26 (- United States)
2016-08-08 11:21Distribution SiteLocky
alpeteglio.it
TISCALIDOMAIN-REG212.129.45.37 (- France)
2016-08-08 11:21Distribution SiteLocky
www.acansorga.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:05Distribution SiteLocky
www.azetapiemonte.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-08 11:05Distribution SiteLocky
alpeteglio.it
TISCALIDOMAIN-REG212.129.45.37 (- France)
2016-08-08 11:05Distribution SiteLocky
armada-kar.nichost.ru
RU-CENTER-RU (n/a)
2016-08-08 11:05Distribution SiteLocky
pogotowie.pcserwis.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-08 11:04Distribution SiteLocky
fieldtennis.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.26 (- United States)
2016-08-08 11:04Distribution SiteLocky
yosi.sa-suke.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-08 11:04Distribution SiteLocky
www.giuni.it
REGISTER-REG80.91.55.42 (- Italy)
2016-08-08 11:03Distribution SiteLocky
www.gonimar.onored.com
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-08-07 19:22Payment SiteCerber
52uo5k3t73ypjije.x3nnbd.top
Eranet International Limited (n/a)
2016-08-07 18:28Payment SiteCerber
4kqd3hmqgptupi3p.dkrie7.top
Eranet International Limited (n/a)
2016-08-07 18:16Payment SiteCerber
52uo5k3t73ypjije.8i8dt4.top
Eranet International Limited (n/a)
2016-08-07 15:41Payment SiteCerber
pmenboeqhyrpvomq.hwh75t.top
Eranet International Limited (n/a)
2016-08-07 10:30Payment SiteCerber
4kqd3hmqgptupi3p.homehuge.top
Alpnames Limited (n/a)
2016-08-07 09:45Payment SiteCerber
4kqd3hmqgptupi3p.goshare.red
Alpnames Limited (n/a)
2016-08-07 06:52Payment SiteCerber
4kqd3hmqgptupi3p.needmight.win
Alpnames Limited (n/a)
2016-08-07 05:31Payment SiteCerber
4kqd3hmqgptupi3p.pap44w.top
Eranet International Limited (n/a)
2016-08-07 01:57Payment SiteCerber
52uo5k3t73ypjije.rgdk0u.top
Eranet International Limited (n/a)
2016-08-07 01:01Payment SiteCerber
pmenboeqhyrpvomq.e6in0v.top
Eranet International Limited (n/a)
2016-08-06 21:31Botnet C&CLocky
fmirgordkhig.xyz
Namecheap208.100.26.234 (- United States)
2016-08-06 20:50Payment SiteCerber
unocl45trpuoefft.wz139z.top
Eranet International Limited (n/a)
2016-08-06 15:19Payment SiteCerber
4kqd3hmqgptupi3p.stopsage.gdn
AlpNames Limited (n/a)
2016-08-06 15:04Payment SiteCerber
52uo5k3t73ypjije.b8ll6n.top
Eranet International Limited (n/a)
2016-08-06 10:44Payment SiteCerber
4kqd3hmqgptupi3p.6h03gw.top
Eranet International Limited (n/a)
2016-08-06 07:57Botnet C&CLocky
ecjfdaqmmyusxntwl.work
Enom208.100.26.234 (- United States)
2016-08-06 06:56Payment SiteCerber
unocl45trpuoefft.frn62e.top
Eranet International Limited (n/a)
2016-08-06 04:25Payment SiteCerber
unocl45trpuoefft.dwkofh.top
Alpnames Limited (n/a)
2016-08-05 22:01Payment SiteCerber
52uo5k3t73ypjije.4oyhvh.top
Eranet International Limited (n/a)
2016-08-05 20:58Payment SiteCerber
4kqd3hmqgptupi3p.nextask.loan
Alpnames Limited (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >