Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-28 09:35Distribution SiteLocky
www.chantale.force9.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.90 (- United Kingdom) +1 A record(s) 212.159.9.90 (AS6871, - United Kingdom)
2016-07-28 09:35Distribution SiteLocky
www.schwarzer-baer-kastl.de
81.169.145.223 (- Germany)
2016-07-28 09:35Distribution SiteLocky
zckupila.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-28 09:35Distribution SiteLocky
www.marinoderosas.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.32 (- Italy)
2016-07-28 09:35Distribution SiteLocky
sav-krelingen.de
46.38.249.83 (- Germany)
2016-07-28 09:35Distribution SiteLocky
fremdesland.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.51 (- United States)
2016-07-28 09:35Distribution SiteLocky
gkxxx.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.52 (- United States)
2016-07-28 09:35Distribution SiteLocky
www.clefranceitalie.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-28 09:35Distribution SiteLocky
www.acheri.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-28 09:35Distribution SiteLocky
bajasae.grupos.usb.ve
159.90.60.215 (- Venezuela)
2016-07-28 09:35Distribution SiteLocky
slit.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-07-28 09:35Distribution SiteLocky
motorkote.org
eNom, Inc.212.7.7.85 (- Estonia)
2016-07-28 09:34Distribution SiteLocky
billy-hanjo.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 09:34Distribution SiteLocky
karumaengeki.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.53 (- United States)
2016-07-28 09:34Distribution SiteLocky
lacrima.ru
RU-CENTER-RU185.43.5.20 (- Germany)
2016-07-28 09:34Distribution SiteLocky
www.kan-therm.ru
RU-CENTER-RU213.189.197.187 (- Russian Federation)
2016-07-28 09:34Distribution SiteLocky
robertstefan.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-28 09:34Distribution SiteLocky
01ad681.netsolhost.com
NETWORK SOLUTIONS, LLC.206.188.192.236 (- United States)
2016-07-28 09:34Distribution SiteLocky
www.uasm.de
81.169.145.224 (- Germany)
2016-07-28 09:34Distribution SiteLocky
www.panella.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-28 09:34Distribution SiteLocky
schefman.info
Key-Systems GmbH185.56.145.137 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
idd00dnu.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-28 09:34Distribution SiteLocky
jozefow.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
luzdevelas.es
(n/a)
2016-07-27 22:06Payment SiteCerber
4kqd3hmqgptupi3p.lorrydo.lol
Alpnames Limited (n/a)
2016-07-27 19:44Payment SiteCerber
unocl45trpuoefft.p4sr76.top
Eranet International Limited (n/a)
2016-07-27 15:46Payment SiteCerber
52uo5k3t73ypjije.gnee6i.top
Eranet International Limited (n/a)
2016-07-27 14:31Payment SiteCerber
unocl45trpuoefft.ahhc36.top
Alpnames Limited (n/a)
2016-07-27 13:11Botnet C&CLocky
bciuemfaapyf.biz
DYNADOT LLC69.195.129.70 (- United States)
2016-07-27 13:07Botnet C&CLocky
5.9.253.173
5.9.253.173 (- Germany)
2016-07-27 13:07Botnet C&CLocky
178.62.232.244
178.62.232.244 (- Netherlands)
2016-07-27 13:04Distribution SiteLocky
marmorkontor.de
85.88.8.15 (- Germany)
2016-07-27 13:04Distribution SiteLocky
www.hime101.com.tw
SEEDNET192.72.83.76 (- Taiwan)
2016-07-27 13:04Distribution SiteLocky
www.gr-lin.de
(n/a)
2016-07-27 13:04Distribution SiteLocky
www.bgrea.karoo.net
NETWORK SOLUTIONS, LLC.212.50.160.36 (- United Kingdom)
2016-07-27 12:49Distribution SiteLocky
www.dogsandtails.be
Telenet BVBA (n/a)
2016-07-27 12:49Distribution SiteLocky
217.64.197.138
n/a
2016-07-27 12:49Distribution SiteLocky
cmt.ro
Vodafone Romania SA91.136.8.9 (- United Kingdom)
2016-07-27 12:49Distribution SiteLocky
deangelis.co.uk
Hostway Limited66.232.131.10 (- United Kingdom)
2016-07-27 12:49Distribution SiteLocky
maruyoshipap.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.46 (- United States)
2016-07-27 12:49Distribution SiteLocky
www.leonardoveronesi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-27 12:49Distribution SiteLocky
beauty-jasmine.ru
RU-CENTER-RU195.208.1.121 (- Russian Federation)
2016-07-27 12:49Distribution SiteLocky
dataprim.fr
OVH213.186.33.2 (- France)
2016-07-27 12:49Distribution SiteLocky
download.arpcc.ro
ICI - ROTLD89.44.124.8 (- Romania)
2016-07-27 12:49Distribution SiteLocky
www.tangoshow.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-27 12:49Distribution SiteLocky
s1prod-ams.ho.ua
91.228.146.12 (- Ukraine)
2016-07-27 12:49Distribution SiteLocky
jupp4u.de
87.106.85.19 (- Germany)
2016-07-27 12:49Distribution SiteLocky
marchandedidees.fr
LIGNE WEB SERVICES - LWS185.98.131.130 (- France)
2016-07-27 12:49Distribution SiteLocky
erkenne-mich-selbst.de
(n/a)
2016-07-27 12:48Distribution SiteLocky
www.svenkneipp.de
81.169.145.148 (- Germany)
2016-07-27 12:48Distribution SiteLocky
hdajaeger.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:48Distribution SiteLocky
ukrasnogomosta.ru
RU-CENTER-RU81.177.139.211 (- Russian Federation)
2016-07-27 12:48Distribution SiteLocky
testkondostone.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-07-27 12:48Distribution SiteLocky
theworldforce.de
(n/a)
2016-07-27 12:48Distribution SiteLocky
francescoeillupo.magix.net
DNS NET INTERNET SERVICE GMBH195.214.216.139 (- Germany)
2016-07-27 12:48Distribution SiteLocky
98.131.20.17
(n/a)
2016-07-27 12:48Distribution SiteLocky
www.sjones.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-27 12:48Distribution SiteLocky
zarabotat.yomu.ru
REGTIME-RU91.223.216.67 (- Ukraine)
2016-07-27 12:48Distribution SiteLocky
www.adafor.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]31.11.34.23 (- Italy)
2016-07-27 12:48Distribution SiteLocky
hotstreams.ru
RU-CENTER-RU193.42.142.132 (- Russian Federation)
2016-07-27 12:48Distribution SiteLocky
www.wellness-com.de
91.213.21.61 (- Germany)
2016-07-27 12:47Distribution SiteLocky
btkdev.lgg.ru
R01-RU79.174.64.15 (- Russian Federation)
2016-07-27 12:47Distribution SiteLocky
fitnesclub.ru
REGISTRATOR-RU90.156.201.105 (- Russian Federation) +3 A record(s) 90.156.201.106 (AS25532, - Russian Federation)
90.156.201.12 (AS25532, - Russian Federation)
90.156.201.56 (AS25532, - Russian Federation)
2016-07-27 12:47Distribution SiteLocky
www.frosinonewesternshow.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-27 12:47Distribution SiteLocky
www.prometsrl.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-27 12:47Distribution SiteLocky
bolloevcenter.ru
RU-CENTER-RU81.177.140.171 (- Russian Federation)
2016-07-27 12:47Distribution SiteLocky
snetwork.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-07-27 12:47Distribution SiteLocky
hdjung.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:47Distribution SiteLocky
www.compland.ee
Zone Media OÜ212.7.7.85 (- Estonia)
2016-07-27 12:47Distribution SiteLocky
enlas.50webs.com
GODADDY.COM, LLC162.210.101.88 (- United States)
2016-07-27 12:47Distribution SiteLocky
oavb.com
TUCOWS DOMAINS INC.216.97.224.210 (- United States)
2016-07-27 12:47Distribution SiteLocky
dub3tv.com
GODADDY.COM, LLC (n/a)
2016-07-27 12:47Distribution SiteLocky
mbctrans.3x.ro
ICI - ROTLD89.42.39.160 (- Romania)
2016-07-27 12:47Distribution SiteLocky
hoosiernetwork.com
ENOM, INC.208.77.17.166 (- United States)
2016-07-27 12:47Distribution SiteLocky
btgnj.com
ENOM, INC.173.225.21.34 (- United States)
2016-07-27 12:47Distribution SiteLocky
zarabotaina.yomu.ru
REGTIME-RU91.223.216.67 (- Ukraine)
2016-07-27 12:47Distribution SiteLocky
karinschacht.addr.com
DOMAIN.COM, LLC72.52.99.36 (- United States)
2016-07-27 12:46Distribution SiteLocky
takemaruko.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.42 (- United States)
2016-07-27 12:46Distribution SiteLocky
modband.com
GODADDY.COM, LLC184.168.221.47 (- United States)
2016-07-27 12:46Distribution SiteLocky
www.tipografiacouto.pt
81.88.57.70 (- Italy)
2016-07-27 12:46Distribution SiteLocky
baer-afc2.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:46Distribution SiteLocky
btkdevelopment.ru
RU-CENTER-RU81.177.139.242 (- Russian Federation)
2016-07-27 12:46Distribution SiteLocky
olgastudio.ro
Romarg SRL89.42.216.144 (- Romania)
2016-07-27 11:32Payment SiteCerber
52uo5k3t73ypjije.dd4xo3.top
Eranet International Limited (n/a)
2016-07-27 11:25Payment SiteCerber
52uo5k3t73ypjije.omrexj.top
Alpnames Limited (n/a)
2016-07-27 10:26Payment SiteCerber
unocl45trpuoefft.9lnito.top
Eranet International Limited (n/a)
2016-07-27 10:22Payment SiteCerber
pmenboeqhyrpvomq.2agglf.top
Alpnames Limited (n/a)
2016-07-27 09:35Distribution SiteLocky
www.milleniumitaly.com
ENOM, INC.212.104.43.41 (- Italy)
2016-07-27 09:35Distribution SiteLocky
hobbyfraeser.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 09:35Distribution SiteLocky
dslandscape.50webs.com
GODADDY.COM, LLC162.210.101.20 (- United States)
2016-07-27 09:35Distribution SiteLocky
wac80v41f.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 09:35Distribution SiteLocky
gmp.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-27 09:35Distribution SiteLocky
italcase.ve.it
REGISTER-REG195.110.124.188 (- Italy)
2016-07-27 09:35Distribution SiteLocky
mendikurconsulting.com
DINAHOSTING SL82.98.160.111 (- Spain)
2016-07-27 09:35Distribution SiteLocky
www.holzrueckewagen.de
81.169.145.194 (- Germany)
2016-07-27 09:35Distribution SiteLocky
alldesu.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-07-27 09:35Distribution SiteLocky
uladekoracje.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-27 09:35Distribution SiteLocky
yogamaruco.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-07-27 09:00Distribution SiteLocky
www.foto-aeree.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-27 09:00Distribution SiteLocky
mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >