Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-24 07:12Payment SiteCerber
unocl45trpuoefft.0evktl.top
Eranet International Limited (n/a)
2016-07-24 03:42Payment SiteCerber
pmenboeqhyrpvomq.txszfs.top
Alpnames Limited (n/a)
2016-07-24 03:25Payment SiteCerber
pmenboeqhyrpvomq.rnkj09.top
Alpnames Limited (n/a)
2016-07-23 19:15Payment SiteCerber
52uo5k3t73ypjije.33dofy.top
Alpnames Limited (n/a)
2016-07-23 16:43Payment SiteCerber
52uo5k3t73ypjije.cjc2jn.top
Alpnames Limited (n/a)
2016-07-23 16:40Payment SiteCerber
52uo5k3t73ypjije.csj0k5.top
Eranet International Limited (n/a)
2016-07-23 14:48Payment SiteCerber
52uo5k3t73ypjije.ws1uet.top
Eranet International Limited (n/a)
2016-07-23 08:17Payment SiteCerber
52uo5k3t73ypjije.asxjdp.top
Alpnames Limited (n/a)
2016-07-23 07:40Payment SiteCerber
52uo5k3t73ypjije.twz1ga.top
Alpnames Limited (n/a)
2016-07-23 07:16Payment SiteCerber
52uo5k3t73ypjije.k56185.top
Alpnames Limited (n/a)
2016-07-22 20:38Payment SiteCerber
52uo5k3t73ypjije.3di24a.top
Eranet International Limited (n/a)
2016-07-22 18:23Payment SiteCerber
52uo5k3t73ypjije.n6kswi.top
Eranet International Limited (n/a)
2016-07-22 18:21Payment SiteCerber
52uo5k3t73ypjije.txszfs.top
Alpnames Limited (n/a)
2016-07-22 17:36Payment SiteCerber
52uo5k3t73ypjije.kzwor6.top
Alpnames Limited (n/a)
2016-07-22 17:20Payment SiteCerber
52uo5k3t73ypjije.ux93ip.top
Eranet International Limited (n/a)
2016-07-22 14:18Payment SiteCerber
52uo5k3t73ypjije.un8niw.top
Alpnames Limited (n/a)
2016-07-22 13:45Distribution SiteLocky
allmusic.c0.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-22 13:45Distribution SiteLocky
files.igamingbusiness.co.uk
123-Reg Limited t/a 123-reg (n/a)
2016-07-22 13:44Distribution SiteLocky
www.piconsul.it
TISCALIDOMAIN-REG37.59.236.156 (- France)
2016-07-22 10:53Distribution SiteLocky
www.gerichtszeichnungen.de
193.141.3.68 (- Germany)
2016-07-22 10:53Distribution SiteLocky
plingplong.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-22 10:53Distribution SiteLocky
wfwf1011.warabuki.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-22 10:53Distribution SiteLocky
dillerator.chat.ru
REGRU-RU77.244.218.85 (- Russian Federation)
2016-07-22 10:52Distribution SiteLocky
www.herity.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-22 10:52Distribution SiteLocky
mizosiri3.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-07-22 10:52Distribution SiteLocky
okumachiryouin.yu-yake.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-22 10:52Distribution SiteLocky
www.sirigor.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-22 10:52Distribution SiteLocky
fotouniek.grafi-offshore.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]35.204.116.33 (- United States)
2016-07-22 10:52Distribution SiteLocky
w879c8c45.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-22 10:52Distribution SiteLocky
tattoo-studio.nl
ZXP80.69.86.210 (- Netherlands)
2016-07-22 10:52Distribution SiteLocky
www.silvotecna.co.cl
200.72.1.75 (- Chile)
2016-07-22 10:52Distribution SiteLocky
www.df9jw.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-22 10:52Distribution SiteLocky
hxt.50webs.com
GODADDY.COM, LLC162.210.101.22 (- United States)
2016-07-22 10:52Distribution SiteLocky
delta5.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-22 10:52Distribution SiteLocky
www.studiocentouno.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-22 10:52Distribution SiteLocky
yagastudio.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.26 (- United States)
2016-07-22 10:52Distribution SiteLocky
www.moran10.karoo.net
NETWORK SOLUTIONS, LLC.213.249.243.21 (- United Kingdom)
2016-07-21 16:44Payment SiteCerber
52uo5k3t73ypjije.xab7m0.top
Alpnames Limited (n/a)
2016-07-21 16:29Payment SiteCerber
52uo5k3t73ypjije.lwbi59.top
Alpnames Limited (n/a)
2016-07-21 12:26Distribution SiteLocky
forum.animeallday.cba.pl
Abc Hosting Ltd.95.211.80.4 (- Netherlands)
2016-07-21 12:26Distribution SiteLocky
merchandising.caesar.it
OVH-REG5.249.154.119 (- Italy)
2016-07-21 12:26Distribution SiteLocky
taikyo-mold.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-07-21 12:26Distribution SiteLocky
www.echoesofpinkfloyd.be
InterNetX GmbH185.107.212.136 (- Netherlands)
2016-07-21 12:26Distribution SiteLocky
didpanas.50webs.com
GODADDY.COM, LLC162.210.101.97 (- United States)
2016-07-21 12:26Distribution SiteLocky
www.bruining-administraties.nl
Cronon AG52.213.120.9 (- Ireland) +1 A record(s) 52.31.243.111 (AS16509, - Ireland)
2016-07-21 12:26Distribution SiteLocky
nevinka.ws
Online NIC Inc.173.230.130.175 (- United States)
2016-07-21 12:26Distribution SiteLocky
kickboxing.cba.pl
Abc Hosting Ltd.37.48.70.196 (- Netherlands)
2016-07-21 12:25Distribution SiteLocky
czajkowski.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-21 12:25Distribution SiteLocky
download.perle.com
NETWORK SOLUTIONS, LLC.204.232.171.128 (- United States)
2016-07-21 12:25Distribution SiteLocky
www.ferwerda.nu
Hosting Concepts80.73.128.91 (- Netherlands) +1 A record(s) 80.73.128.94 (AS30830, - Netherlands)
2016-07-21 12:25Distribution SiteLocky
huelsta.srns.eu
STRATO AG81.169.187.180 (- Germany)
2016-07-21 12:25Distribution SiteLocky
etfgeek.us
DELUXE SMALL BUSINESS SALES, INC[...] (n/a)
2016-07-21 12:25Distribution SiteLocky
www.infobank-web.info
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-07-21 12:25Distribution SiteLocky
eacglobal.net
NETWORK SOLUTIONS, LLC.206.188.193.208 (- United States)
2016-07-21 12:25Distribution SiteLocky
tatsumiwrecker.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.48 (- United States)
2016-07-21 11:28Payment SiteCerber
52uo5k3t73ypjije.wht5py.top
Alpnames Limited (n/a)
2016-07-21 11:23Distribution SiteLocky
www.kardborren.se
Loopia AB91.189.41.173 (- Sweden)
2016-07-21 11:23Distribution SiteLocky
dionaholding.ru
BEELINE-RU185.48.238.75 (- Russian Federation)
2016-07-21 11:23Distribution SiteLocky
mebel-bogatyr.ru
REGRU-RU (n/a)
2016-07-21 11:22Distribution SiteLocky
agencijakocka.rs
BeotelNet-ISP d.o.o.194.106.162.116 (- Serbia)
2016-07-21 11:22Distribution SiteLocky
manicureland.com
INTERNET INVEST, LTD. DBA IMENA.[...]89.184.77.233 (- Ukraine)
2016-07-21 11:22Distribution SiteLocky
mmkk7.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.165 (- United States)
2016-07-21 11:22Distribution SiteLocky
wusromania.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-21 11:22Distribution SiteLocky
dostupokno.ru
REGRU-RU141.8.192.44 (- Russian Federation)
2016-07-21 11:22Distribution SiteLocky
dou104.rybadm.ru
RU-CENTER-RU185.57.237.33 (- Russian Federation)
2016-07-21 11:22Distribution SiteLocky
premiuminformation.org
eNom, Inc. (n/a)
2016-07-21 11:22Distribution SiteLocky
strojdom33.ru
REGRU-RU141.8.194.9 (- Russian Federation)
2016-07-21 11:22Distribution SiteLocky
uedawoooinimoriageru.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-07-21 11:22Distribution SiteLocky
www.redimec.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.41 (- Italy)
2016-07-21 11:22Distribution SiteLocky
atriym-stroy.ru
R01-RU178.208.83.37 (- Russian Federation)
2016-07-21 11:22Distribution SiteLocky
i-advocate.ru
RU-CENTER-RU92.53.96.88 (- Russian Federation)
2016-07-21 11:22Distribution SiteLocky
strojka-33.ru
R01-RU185.53.178.6 (- Germany)
2016-07-21 11:22Distribution SiteLocky
create-enable.com
TUCOWS DOMAINS INC.185.119.173.52 (- United Kingdom)
2016-07-21 11:22Distribution SiteLocky
forum-droid.16mb.com
GODADDY.COM, LLC (n/a)
2016-07-21 11:22Distribution SiteLocky
dou104.rybadm.ru
RU-CENTER-RU185.57.237.33 (- Russian Federation)
2016-07-21 11:21Distribution SiteLocky
ybp.ru
RU-CENTER-RU195.208.1.152 (- Russian Federation)
2016-07-21 11:21Distribution SiteLocky
sealionnn.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.42 (- United States)
2016-07-21 11:21Distribution SiteLocky
tapijthuisrene.atspace.com
TUCOWS DOMAINS INC.185.176.43.19 (- Bulgaria)
2016-07-21 11:21Distribution SiteLocky
yundun.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.38 (- United States)
2016-07-21 11:21Distribution SiteLocky
actox.com
GODADDY.COM, LLC206.180.236.149 (- United States)
2016-07-21 11:21Distribution SiteLocky
oldim.lviv.ua
91.194.41.32 (- Ukraine)
2016-07-21 11:21Distribution SiteLocky
omunegru.3x.ro
ICI - ROTLD89.42.39.160 (- Romania)
2016-07-21 11:21Distribution SiteLocky
voisin-sa.com
ELB GROUP, INC.91.191.158.152 (- France)
2016-07-21 11:21Distribution SiteLocky
vkt-rus.com
REGIONAL NETWORK INFORMATION CEN[...]195.208.0.15 (- Russian Federation)
2016-07-21 11:21Distribution SiteLocky
kveldeil.no
176.111.200.27 (- Norway)
2016-07-21 11:21Distribution SiteLocky
www.vbpctraining.com
NETWORK SOLUTIONS, LLC.216.239.136.223 (- United States)
2016-07-21 11:21Distribution SiteLocky
gbuso.ru
R01-RU87.236.19.190 (- Russian Federation)
2016-07-21 11:21Distribution SiteLocky
steam-keys.ezar.ru
REGTIME-RU188.120.228.166 (- Russian Federation)
2016-07-21 11:21Distribution SiteLocky
pixel.sportsontheweb.net
ENOM, INC.185.176.43.61 (- Bulgaria)
2016-07-21 11:21Distribution SiteLocky
milochka.greatnow.com
ENOM, INC.192.64.119.254 (- United States)
2016-07-21 11:20Distribution SiteLocky
krisnela.50webs.com
GODADDY.COM, LLC162.210.101.97 (- United States)
2016-07-21 11:20Distribution SiteLocky
j82464f9.bget.ru
R01-RU185.50.25.5 (- Russian Federation)
2016-07-21 11:20Distribution SiteLocky
bizforward.ru
R01-RU (n/a)
2016-07-21 11:20Distribution SiteLocky
vkt-rus.com
REGIONAL NETWORK INFORMATION CEN[...]195.208.0.15 (- Russian Federation)
2016-07-21 11:20Distribution SiteLocky
steamcommuniity.hop.ru
RU-CENTER-RU195.16.42.38 (- Russian Federation)
2016-07-21 11:20Distribution SiteLocky
yamero.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-07-21 11:20Distribution SiteLocky
choogo.net
GABIA, INC.183.101.113.29 (- Korea)
2016-07-21 11:20Distribution SiteLocky
www.chipo.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-21 11:20Distribution SiteLocky
npokosumosu.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.42 (- United States)
2016-07-21 11:20Distribution SiteLocky
www.abacoguide.it
TISCALIDOMAIN-REG212.129.12.179 (- France)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >