Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-29 08:42Distribution SiteLocky
www.lartsev.com
ENOM, INC.212.7.7.85 (- Estonia)
2016-07-29 04:52Distribution SiteLocky
studiobbou.com
1&1 INTERNET SE92.222.7.85 (- France)
2016-07-29 04:52Distribution SiteLocky
familieewald.de
109.237.138.36 (- Germany)
2016-07-29 04:52Distribution SiteLocky
leska-test.angelfire.com
CSC CORPORATE DOMAINS, INC.209.202.252.41 (- United States)
2016-07-29 04:52Distribution SiteLocky
111.86.142.67
n/a
2016-07-29 04:52Distribution SiteLocky
www.guapaweb.jazztel.es
62.14.3.195 (- Spain)
2016-07-29 04:52Distribution SiteLocky
www.itoigawanavi-www.com
JAPAN REGISTRY SERVICES CO., LTD[...]220.220.248.74 (- Japan)
2016-07-29 04:52Distribution SiteLocky
www.offroadhandel.de
81.169.145.223 (- Germany)
2016-07-29 04:52Distribution SiteLocky
www.landscape.hu
195.70.32.145 (- Hungary)
2016-07-29 04:52Distribution SiteLocky
www.landscape.hu
195.70.32.145 (- Hungary)
2016-07-29 04:52Distribution SiteLocky
carelife.koborezakura.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-29 04:52Distribution SiteLocky
www.hotelnidodaquila.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-29 04:51Distribution SiteLocky
www.finkeyhangszer.hu
195.228.240.47 (- Hungary)
2016-07-29 04:51Distribution SiteLocky
adsnight.com
GODADDY.COM, LLC166.62.10.52 (- United States)
2016-07-29 04:51Distribution SiteLocky
termstal.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-29 04:15Payment SiteCerber
4kqd3hmqgptupi3p.v11z5e.top
Alpnames Limited (n/a)
2016-07-28 22:14Payment SiteCerber
27lelchgcvs2wpm7.nfgpeb.top
Eranet International Limited (n/a)
2016-07-28 18:29Payment SiteCerber
pmenboeqhyrpvomq.y5j7e6.top
Eranet International Limited (n/a)
2016-07-28 15:24Payment SiteCerber
unocl45trpuoefft.kswcuk.top
Eranet International Limited (n/a)
2016-07-28 14:44Payment SiteCerber
unocl45trpuoefft.31wkhu.top
Eranet International Limited (n/a)
2016-07-28 13:47Botnet C&CLocky
urulvtffwoq.xyz
Gandi SAS91.226.92.202 (- Russian Federation)
2016-07-28 13:20Distribution SiteLocky
whvf2gm5n.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 13:20Distribution SiteLocky
gnetgnethouse.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-07-28 13:20Distribution SiteLocky
schefman.info
Key-Systems GmbH185.56.145.137 (- Netherlands)
2016-07-28 13:20Distribution SiteLocky
www.sgspeziapallamano.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-28 13:20Distribution SiteLocky
aminghausen.com
KEY-SYSTEMS GMBH176.9.189.26 (- Germany)
2016-07-28 12:25Botnet C&CLocky
193.124.180.6
193.124.180.6 (- Russian Federation)
2016-07-28 12:25Botnet C&CLocky
139.59.147.0
139.59.147.0 (- Germany)
2016-07-28 11:55Distribution SiteLocky
robertstefan.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-28 11:55Distribution SiteLocky
apachost.com
SYNERGY WHOLESALE PTY LTD123.51.125.152 (- Australia)
2016-07-28 11:54Distribution SiteLocky
sonomama.kan-be.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-28 11:54Distribution SiteLocky
sardain.fr
1&1 Internet SE (n/a)
2016-07-28 11:54Distribution SiteLocky
www.aspadeljaen.com
NOMINALIA INTERNET S.L.81.88.48.71 (- Italy)
2016-07-28 11:54Distribution SiteLocky
levivanesch.nl
Internet Service Europe B.V.83.172.129.28 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
avon-beraterin-mank.de
(n/a)
2016-07-28 11:54Distribution SiteLocky
dawstaw.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
okhtinka.ru.hoster-ok.com
CSL COMPUTER SERVICE LANGENBACH [...]88.86.111.110 (- Czech Republic)
2016-07-28 11:54Distribution SiteLocky
www.camelu.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]52.204.129.22 (- United States) +1 A record(s) 54.85.127.70 (AS14618, - United States)
2016-07-28 11:54Distribution SiteLocky
maka.ken-shin.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-28 11:54Distribution SiteLocky
gumka.strefa.pl
Grupa Interia.pl sp. z o.o. sp. [...]217.74.66.167 (- Poland)
2016-07-28 11:54Distribution SiteLocky
www.flagships.de
81.169.145.157 (- Germany)
2016-07-28 11:54Distribution SiteLocky
kreacjonizm.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
www.andyschwietzer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 11:54Distribution SiteLocky
cukiernia_izabela.republika.pl
213.180.150.17 (- Poland)
2016-07-28 11:29Distribution SiteLocky
m1ikumoumist.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-07-28 11:29Distribution SiteLocky
www.guapaweb.jazztel.es
62.14.3.195 (- Spain)
2016-07-28 11:11Distribution SiteLocky
creartnet.com
OVH213.186.33.4 (- France)
2016-07-28 11:10Distribution SiteLocky
www.inari.net
TUCOWS DOMAINS INC.80.75.96.68 (- Finland)
2016-07-28 11:10Distribution SiteLocky
sv-r.ru
R01-RU81.177.139.241 (- Russian Federation)
2016-07-28 11:10Distribution SiteLocky
mbiurorachunkowe.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-28 11:10Distribution SiteLocky
www.rgtalp14.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-28 11:10Distribution SiteLocky
blanquerna.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-28 11:10Distribution SiteLocky
dev12.gammat.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-07-28 11:09Distribution SiteLocky
kbridge.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.39 (- United States)
2016-07-28 11:09Distribution SiteLocky
papamama.com.sg
WEB COMMERCE COMMUNICATIONS (S) [...]119.31.235.70 (- Singapore)
2016-07-28 11:09Distribution SiteLocky
www.ruyssinck-demeyer.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-07-28 10:31Distribution SiteLocky
okhtinka.ru.hoster-ok.com
CSL COMPUTER SERVICE LANGENBACH [...]88.86.111.110 (- Czech Republic)
2016-07-28 10:31Distribution SiteLocky
burkersdorf.eu
Speedbone GmbH195.3.248.179 (- Germany)
2016-07-28 10:31Distribution SiteLocky
campustouren.de
88.80.192.142 (- Germany)
2016-07-28 10:31Distribution SiteLocky
exclusive-closet.com
GODADDY.COM, LLC192.186.250.7 (- United States)
2016-07-28 10:31Distribution SiteLocky
arabian-horse-highlights.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 10:31Distribution SiteLocky
83.235.64.44
n/a
2016-07-28 09:36Distribution SiteLocky
www.andyschwietzer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 09:36Distribution SiteLocky
it4cio.servicos.ws
GoDaddy.com187.45.193.203 (- Brazil)
2016-07-28 09:36Distribution SiteLocky
christilipp.com
WORLD4YOU INTERNET SERVICES GMBH81.19.145.90 (- Austria)
2016-07-28 09:35Distribution SiteLocky
178.78.87.8
n/a
2016-07-28 09:35Distribution SiteLocky
baldwinhistory.portalstream.net
TUCOWS DOMAINS INC.64.33.128.71 (- United States)
2016-07-28 09:35Distribution SiteLocky
piggy.riffle.be
IOP bvba195.28.164.224 (- Belgium)
2016-07-28 09:35Distribution SiteLocky
yourparty.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-28 09:35Distribution SiteLocky
www.chantale.force9.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.90 (- United Kingdom) +1 A record(s) 212.159.9.90 (AS6871, - United Kingdom)
2016-07-28 09:35Distribution SiteLocky
www.schwarzer-baer-kastl.de
81.169.145.223 (- Germany)
2016-07-28 09:35Distribution SiteLocky
zckupila.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-28 09:35Distribution SiteLocky
www.marinoderosas.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.32 (- Italy)
2016-07-28 09:35Distribution SiteLocky
sav-krelingen.de
46.38.249.83 (- Germany)
2016-07-28 09:35Distribution SiteLocky
fremdesland.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.51 (- United States)
2016-07-28 09:35Distribution SiteLocky
gkxxx.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.52 (- United States)
2016-07-28 09:35Distribution SiteLocky
www.clefranceitalie.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-28 09:35Distribution SiteLocky
www.acheri.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-28 09:35Distribution SiteLocky
bajasae.grupos.usb.ve
159.90.60.215 (- Venezuela)
2016-07-28 09:35Distribution SiteLocky
slit.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-07-28 09:35Distribution SiteLocky
motorkote.org
eNom, Inc.212.7.7.85 (- Estonia)
2016-07-28 09:34Distribution SiteLocky
billy-hanjo.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 09:34Distribution SiteLocky
karumaengeki.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.53 (- United States)
2016-07-28 09:34Distribution SiteLocky
lacrima.ru
RU-CENTER-RU185.43.5.20 (- Russian Federation)
2016-07-28 09:34Distribution SiteLocky
www.kan-therm.ru
RU-CENTER-RU213.189.197.187 (- Russian Federation)
2016-07-28 09:34Distribution SiteLocky
robertstefan.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-28 09:34Distribution SiteLocky
01ad681.netsolhost.com
NETWORK SOLUTIONS, LLC.206.188.192.236 (- United States)
2016-07-28 09:34Distribution SiteLocky
www.uasm.de
81.169.145.224 (- Germany)
2016-07-28 09:34Distribution SiteLocky
www.panella.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-28 09:34Distribution SiteLocky
schefman.info
Key-Systems GmbH185.56.145.137 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
idd00dnu.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-28 09:34Distribution SiteLocky
jozefow.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
luzdevelas.es
(n/a)
2016-07-27 22:06Payment SiteCerber
4kqd3hmqgptupi3p.lorrydo.lol
Alpnames Limited (n/a)
2016-07-27 19:44Payment SiteCerber
unocl45trpuoefft.p4sr76.top
Eranet International Limited (n/a)
2016-07-27 15:46Payment SiteCerber
52uo5k3t73ypjije.gnee6i.top
Eranet International Limited (n/a)
2016-07-27 14:31Payment SiteCerber
unocl45trpuoefft.ahhc36.top
Alpnames Limited (n/a)
2016-07-27 13:11Botnet C&CLocky
bciuemfaapyf.biz
DYNADOT LLC69.195.129.70 (- United States)
2016-07-27 13:07Botnet C&CLocky
5.9.253.173
5.9.253.173 (- Germany)
2016-07-27 13:07Botnet C&CLocky
178.62.232.244
178.62.232.244 (- Netherlands)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >