Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-10-17 12:57Payment SiteCerber
vyohacxzoue32vvk.7jrv53.bid
Eranet International Limited (n/a)
2016-10-16 21:24Botnet C&CLocky
wrubyjtvqhxaqkh.pw
Namecheap208.100.26.234 (- United States)
2016-10-15 23:55Payment SiteCerber
xrhwryizf5mui7a5.djintc.bid
Eranet International Limited (n/a)
2016-10-15 21:24Payment SiteCerber
ffoqr3ug7m726zou.ukswcu.bid
Eranet International Limited (n/a)
2016-10-15 16:42Payment SiteCerber
ahuqfrqk54v3vnzj.x90yk1.bid
Eranet International Limited (n/a)
2016-10-15 00:08Botnet C&CLocky
185.46.11.73
185.46.11.73 (- Russian Federation)
2016-10-14 22:12Payment SiteCerber
vyohacxzoue32vvk.axu3u8.bid
Eranet International Limited (n/a)
2016-10-14 10:40Payment SiteCerber
wjtqjleommc4z46i.7hu6og.bid
Eranet International Limited (n/a)
2016-10-13 08:49Payment SiteCerber
ffoqr3ug7m726zou.u9fcji.bid
Eranet International Limited (n/a)
2016-10-13 06:44Payment SiteCerber
ahuqfrqk54v3vnzj.v5neyw.bid
Eranet International Limited (n/a)
2016-10-13 06:32Payment SiteCerber
ffoqr3ug7m726zou.hajw7w.bid
Eranet International Limited (n/a)
2016-10-12 16:16Payment SiteCerber
ahuqfrqk54v3vnzj.zn90h4.bid
Eranet International Limited (n/a)
2016-10-12 11:53Payment SiteCerber
wjtqjleommc4z46i.9sellg.bid
Eranet International Limited (n/a)
2016-10-11 20:51Payment SiteCerber
ahuqfrqk54v3vnzj.xs2xeh.bid
Eranet International Limited (n/a)
2016-10-11 20:49Payment SiteCerber
ahuqfrqk54v3vnzj.u9fcji.bid
Eranet International Limited (n/a)
2016-10-11 09:39Payment SiteCerber
lfdachijzuwx4bc4.fwzxnb.bid
Eranet International Limited (n/a)
2016-10-11 09:32Payment SiteCerber
ahuqfrqk54v3vnzj.6avw2a.bid
Eranet International Limited (n/a)
2016-10-11 00:30Payment SiteCerber
ahuqfrqk54v3vnzj.i81wik.bid
Eranet International Limited (n/a)
2016-10-10 23:20Payment SiteCerber
ffoqr3ug7m726zou.yv3uwa.bid
Eranet International Limited (n/a)
2016-10-10 22:57Payment SiteCerber
lfdachijzuwx4bc4.ev99l6.bid
Eranet International Limited (n/a)
2016-10-10 22:41Payment SiteCerber
ffoqr3ug7m726zou.l4dlll.bid
Eranet International Limited (n/a)
2016-10-10 22:32Payment SiteCerber
ffoqr3ug7m726zou.le6611.bid
Eranet International Limited (n/a)
2016-10-10 15:37Payment SiteCerber
lfdachijzuwx4bc4.0ndl3j.bid
Eranet International Limited (n/a)
2016-10-10 11:48Payment SiteCerber
ffoqr3ug7m726zou.sg9lxh.bid
Eranet International Limited (n/a)
2016-10-10 07:07Payment SiteCerber
ahuqfrqk54v3vnzj.uzeb6r.bid
Eranet International Limited (n/a)
2016-10-10 01:54Payment SiteCerber
wjtqjleommc4z46i.y7603i.bid
Eranet International Limited (n/a)
2016-10-10 00:24Payment SiteCerber
ahuqfrqk54v3vnzj.g4dc5s.bid
Eranet International Limited (n/a)
2016-10-09 19:33Payment SiteCerber
ffoqr3ug7m726zou.zio9yg.bid
Eranet International Limited (n/a)
2016-10-09 16:12Payment SiteCerber
ffoqr3ug7m726zou.i4ucg2.bid
Eranet International Limited (n/a)
2016-10-09 11:43Payment SiteCerber
52uo5k3t73ypjije.8rxv74.bid
Eranet International Limited (n/a)
2016-10-08 10:58Botnet C&CLocky
185.75.46.122
185.75.46.122 (- Russian Federation)
2016-10-08 04:56Payment SiteCerber
52uo5k3t73ypjije.e32d1o.bid
Eranet International Limited (n/a)
2016-10-07 20:34Payment SiteCerber
ahuqfrqk54v3vnzj.sg9lxh.bid
Eranet International Limited (n/a)
2016-10-07 19:44Payment SiteCerber
ahuqfrqk54v3vnzj.n3oyw7.bid
Eranet International Limited (n/a)
2016-10-07 18:02Payment SiteCerber
52uo5k3t73ypjije.gmnjz7.bid
Eranet International Limited (n/a)
2016-10-07 11:25Payment SiteCerber
52uo5k3t73ypjije.hossy3.bid
Eranet International Limited (n/a)
2016-10-07 09:14Distribution SiteLocky
xixiaxianggua.com
BIZCN.COM, INC. (n/a)
2016-10-07 09:07Payment SiteTorrentLocker
4w5wihkwyhsav2ha.dreamtest.at
103.224.182.250 (- Australia)
2016-10-07 05:28Distribution SiteLocky
tupekvetch.org
Key-Systems GmbH (n/a)
2016-10-07 05:27Distribution SiteLocky
misicka.com
GODADDY.COM, LLC185.224.137.211 (- Germany)
2016-10-07 05:27Distribution SiteLocky
all-rides.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-10-07 05:26Distribution SiteLocky
glazypablo.com
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:26Distribution SiteLocky
teiltekke.net
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:26Distribution SiteLocky
peryskop.biz
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]91.102.114.204 (- Poland)
2016-10-07 05:25Distribution SiteLocky
betwer.com
XIN NET TECHNOLOGY CORPORATION (n/a)
2016-10-07 05:24Distribution SiteLocky
bj-fzwb.com
SHANGHAI YOVOLE NETWORKS INC. (n/a)
2016-10-07 05:23Distribution SiteLocky
miroyill.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:23Distribution SiteLocky
caihongemc.com
WEST263 INTERNATIONAL LIMITED (n/a)
2016-10-07 05:23Distribution SiteLocky
glazypablo.com
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:22Distribution SiteLocky
taddboxers.com
GODADDY.COM, LLC107.180.55.17 (- United States)
2016-10-07 05:22Distribution SiteLocky
meiriqj.com
CHENGDU WEST DIMENSION DIGITAL T[...]104.217.138.13 (- United States)
2016-10-07 05:22Distribution SiteLocky
bishasf.com
BEIJING INNOVATIVE LINKAGE TECHN[...]142.111.138.116 (- China)
2016-10-07 05:22Distribution SiteLocky
diemsolutions.com
ENETICA PTY LTD116.0.23.225 (- Australia)
2016-10-07 05:21Distribution SiteLocky
aseandates.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-10-07 05:21Distribution SiteLocky
cg3dstudio.com
GODADDY.COM, LLC166.62.28.105 (- United States)
2016-10-07 05:21Distribution SiteLocky
cangsu.net
WEST263 INTERNATIONAL LIMITED (n/a)
2016-10-07 05:21Distribution SiteLocky
essennarose.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-10-07 05:20Distribution SiteLocky
chchqq.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-10-07 05:20Distribution SiteLocky
bestsourcecode.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-10-07 05:20Distribution SiteLocky
aboeon.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:19Distribution SiteLocky
bbs.vlibang.com
HICHINA ZHICHENG TECHNOLOGY LTD.112.74.23.88 (- China)
2016-10-07 05:18Distribution SiteLocky
maxtherm.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-10-07 05:18Distribution SiteLocky
mediaalias.com
GODADDY.COM, LLC184.168.221.35 (- United States)
2016-10-07 05:18Distribution SiteLocky
aboeon.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:18Distribution SiteLocky
aboeon.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:18Distribution SiteLocky
tupekvetch.org
Key-Systems GmbH (n/a)
2016-10-07 05:17Distribution SiteLocky
fightingtommyriley.com
NETWORK SOLUTIONS, LLC. (n/a)
2016-10-07 05:17Distribution SiteLocky
goodkiddy.com
XIN NET TECHNOLOGY CORPORATION122.114.36.93 (- China)
2016-10-07 05:17Distribution SiteLocky
cg3dstudio.com
GODADDY.COM, LLC166.62.28.105 (- United States)
2016-10-07 05:16Distribution SiteLocky
bobadc.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-10-07 05:16Distribution SiteLocky
upav.org
PDR Ltd. d/b/a PublicDomainRegis[...]209.172.42.4 (- Canada)
2016-10-07 05:16Distribution SiteLocky
enricobasili.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.197.128.182 (- Italy)
2016-10-07 05:16Distribution SiteLocky
scorecapture.com
EASYDNS TECHNOLOGIES, INC.52.232.127.196 (- Netherlands)
2016-10-07 05:16Distribution SiteLocky
glazypablo.com
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:16Distribution SiteLocky
xoomland.com
TUCOWS DOMAINS INC. (n/a)
2016-10-07 05:15Distribution SiteLocky
china0315.com
35 TECHNOLOGY CO., LTD119.10.51.101 (- China)
2016-10-07 05:15Distribution SiteLocky
miroyill.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:15Distribution SiteLocky
chulkyu.com
GABIA, INC.175.126.195.54 (- Korea)
2016-10-07 05:14Distribution SiteLocky
bubbleonlineshop.com
HICHINA ZHICHENG TECHNOLOGY LTD.204.11.56.48 (- Virgin Islands)
2016-10-07 05:14Distribution SiteLocky
teiltekke.net
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:13Distribution SiteLocky
gaa-sc.org
FastDomain Inc. (n/a)
2016-10-07 05:13Distribution SiteLocky
bdfxb.com
HICHINA ZHICHENG TECHNOLOGY LTD.182.92.220.92 (- China)
2016-10-07 05:13Distribution SiteLocky
miroyill.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-07 05:13Distribution SiteLocky
bezdeals.com
TUCOWS DOMAINS INC. (n/a)
2016-10-07 05:12Distribution SiteLocky
peryskop.biz
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]91.102.114.204 (- Poland)
2016-10-07 05:12Distribution SiteLocky
clinicatafur.com
INTERDOMINIOS, INC.185.61.154.39 (- United Kingdom)
2016-10-07 05:12Distribution SiteLocky
teiltekke.net
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:10Distribution SiteLocky
essennarose.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-10-07 05:10Distribution SiteLocky
akseko.ru
RU-CENTER-RU93.95.103.189 (- Russian Federation)
2016-10-07 05:10Distribution SiteLocky
bezdeals.com
TUCOWS DOMAINS INC. (n/a)
2016-10-07 05:10Distribution SiteLocky
teiltekke.net
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:09Distribution SiteLocky
tupekvetch.org
Key-Systems GmbH (n/a)
2016-10-07 05:09Distribution SiteLocky
maxtherm.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-10-07 05:09Distribution SiteLocky
usedtextilemachinerylive.com
123-REG LIMITED213.175.217.179 (- United Kingdom)
2016-10-07 05:08Distribution SiteLocky
chandigarhcabs.com
GODADDY.COM, LLC (n/a)
2016-10-07 05:08Distribution SiteLocky
glazypablo.com
KEY-SYSTEMS GMBH (n/a)
2016-10-07 05:08Distribution SiteLocky
zorgboerderijtzicht.nl
The Registrar Company B.V. (n/a)
2016-10-07 05:07Distribution SiteLocky
idealuze.com
FBS INC. (n/a)
2016-10-07 05:07Distribution SiteLocky
chinafanin.com
HICHINA ZHICHENG TECHNOLOGY LTD.106.15.89.54 (- China)
2016-10-07 05:07Distribution SiteLocky
www.resumebuddy.net
ENOM, INC. (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >