Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-27 06:23Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM192.186.222.166 (- United States)
2016-07-27 06:23Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC160.153.74.69 (- United States)
2016-07-27 06:23Distribution SiteLocky
edilperle.it
WIDE-REG217.73.226.220 (- Italy)
2016-07-27 06:23Distribution SiteLocky
equalityindonesia.com
CV. JOGJACAMP202.52.146.56 (- Indonesia)
2016-07-27 06:23Distribution SiteLocky
pasadenaoffice.com
REGISTER.COM, INC. (n/a)
2016-07-27 06:23Distribution SiteLocky
sichenia.omniadvert.it
ARUBA-REG95.110.242.65 (- Italy)
2016-07-27 06:23Distribution SiteLocky
seroca.com
TECNOCRATICA CENTRO DE DATOS, S.[...]46.226.47.21 (- Spain)
2016-07-27 06:23Distribution SiteLocky
banthaoduoc.com
MAT BAO TRADING & SERVICE COMPAN[...]125.253.113.122 (- Vietnam)
2016-07-27 06:22Distribution SiteLocky
econopaginas.com
NEUBOX INTERNET SA DE CV (n/a)
2016-07-27 06:22Distribution SiteLocky
s2mgmt.com
GODADDY.COM, LLC23.236.62.147 (- United States)
2016-07-27 06:22Distribution SiteLocky
deanstum.com
GODADDY.COM, LLC192.186.229.69 (- United States)
2016-07-27 06:22Distribution SiteLocky
travoxsb.com
TUCOWS DOMAINS INC.110.4.45.235 (- Malaysia)
2016-07-27 06:22Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC50.63.202.38 (- United States)
2016-07-27 06:22Distribution SiteLocky
hate-metal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.9.13.83 (- Germany)
2016-07-27 00:51Payment SiteCerber
52uo5k3t73ypjije.k9z7pm.top
Alpnames Limited (n/a)
2016-07-26 22:27Payment SiteCerber
52uo5k3t73ypjije.daigy0.top
Alpnames Limited (n/a)
2016-07-26 20:34Payment SiteCerber
52uo5k3t73ypjije.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 20:20Payment SiteCerber
unocl45trpuoefft.jjogbj.top
Eranet International Limited (n/a)
2016-07-26 19:10Payment SiteCerber
4kqd3hmqgptupi3p.dd4xo3.top
Eranet International Limited (n/a)
2016-07-26 19:05Payment SiteCerber
4kqd3hmqgptupi3p.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 17:22Payment SiteCerber
unocl45trpuoefft.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 13:58Distribution SiteLocky
www.trapallan.com
10DENCEHISPAHARD, S.L134.0.11.62 (- Spain)
2016-07-26 13:58Distribution SiteLocky
gautyon.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.49 (- United States)
2016-07-26 13:58Distribution SiteLocky
marionawe.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 13:58Distribution SiteLocky
joseptarradellas38.com
10DENCEHISPAHARD, S.L (n/a)
2016-07-26 13:58Distribution SiteLocky
www.tinayr.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-26 13:58Distribution SiteLocky
nichudousoukai.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-07-26 12:46Distribution SiteLocky
alanakamine.com.br
108.179.193.133 (- United States)
2016-07-26 12:46Distribution SiteLocky
akva-sarat.nichost.ru
RU-CENTER-RU195.208.1.109 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
relive-clean.ru
REGISTRATOR-RU90.156.201.111 (- Russian Federation) +3 A record(s) 90.156.201.47 (AS25532, - Russian Federation)
90.156.201.55 (AS25532, - Russian Federation)
90.156.201.83 (AS25532, - Russian Federation)
2016-07-26 12:46Distribution SiteLocky
gp-logistics.ru
R01-RU77.222.40.38 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
anttention.tv
GODADDY.COM, LLC184.168.221.17 (- United States)
2016-07-26 12:46Distribution SiteLocky
beautifulhosting.com.au
Web Address Registration (n/a)
2016-07-26 12:46Distribution SiteLocky
brasconsult.ru
RU-CENTER-RU5.101.152.86 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
psclimat.ru
NETHOUSE-RU185.93.108.90 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
bobbysinghwpg.com
GODADDY.COM, LLC192.186.246.98 (- United States)
2016-07-26 12:46Distribution SiteLocky
mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)
2016-07-26 12:46Distribution SiteLocky
schlebach.25mm.ru
R01-RU93.171.222.110 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
tvoy-android.com
HOSTING UKRAINE LLC185.68.16.83 (- Ukraine)
2016-07-26 12:46Distribution SiteLocky
krvrn2.bget.ru
R01-RU (n/a)
2016-07-26 12:45Distribution SiteLocky
mylimajai.lt
UAB "Interneto vizija" (n/a)
2016-07-26 12:45Distribution SiteLocky
sveikata-jums.lt
UAB "Interneto vizija"79.98.28.54 (- Lithuania)
2016-07-26 11:58Botnet C&CLocky
91.234.35.216
91.234.35.216 (- Ukraine)
2016-07-26 11:58Botnet C&CLocky
31.41.47.41
31.41.47.41 (- Russian Federation)
2016-07-26 11:38Distribution SiteLocky
djk-st-arnual.de
(n/a)
2016-07-26 11:37Distribution SiteLocky
topmanagers.claas.fr
E.L.B. MULTIMEDIA - Netissime (n/a)
2016-07-26 11:37Distribution SiteLocky
finaledithon.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.39 (- United States)
2016-07-26 11:37Distribution SiteLocky
tpllaw.com
DOMAINPEOPLE, INC.216.87.186.90 (- United States)
2016-07-26 11:37Distribution SiteLocky
www.louislechien.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-07-26 11:37Distribution SiteLocky
bettina-mikulle.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 11:37Distribution SiteLocky
www.anti-gewalt-training-sh.de
81.169.145.105 (- Germany)
2016-07-26 11:37Distribution SiteLocky
www.annamariapanarello.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
r-p-b.de
(n/a)
2016-07-26 11:37Distribution SiteLocky
koushuen.co.jp
219.99.208.109 (- Japan)
2016-07-26 11:37Distribution SiteLocky
www.foto-aeree.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
www.motoslittetrecime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
zoologiczny.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-26 11:37Distribution SiteLocky
2ahiru2school.houkou-onchi.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-26 11:37Distribution SiteLocky
www.westline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
svc026.wic011v.server-web.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]202.148.139.25 (- Australia)
2016-07-26 11:36Distribution SiteLocky
tonerliber.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-07-26 11:36Distribution SiteLocky
optilogus.com
NAME.COM, INC.192.185.17.123 (- United States)
2016-07-26 11:36Distribution SiteLocky
ostseeurlaub-tk.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 11:36Distribution SiteLocky
exploromania4x4club.ro
Romarg SRL89.42.216.118 (- Romania)
2016-07-26 11:36Distribution SiteLocky
www.hfs.url.tw
HINET211.72.207.202 (- Taiwan)
2016-07-26 11:36Distribution SiteLocky
www.zenemuzeum.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-26 11:36Distribution SiteLocky
www.marina188.com.br
187.45.195.184 (- Brazil)
2016-07-26 11:36Distribution SiteLocky
download.yaoizm.ru
RU-CENTER-RU (n/a)
2016-07-26 11:36Distribution SiteLocky
mond.50webs.com
GODADDY.COM, LLC162.210.101.21 (- United States)
2016-07-26 11:36Distribution SiteLocky
czemarserwis.home.pl
home.pl S.A.188.128.137.126 (- Poland)
2016-07-26 11:36Distribution SiteLocky
www.sistronic.com.co
DOMINIO AMIGO204.11.59.175 (- United States)
2016-07-26 11:35Distribution SiteLocky
www.isleofwightcomputerrepairs.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-26 11:35Distribution SiteLocky
tulapoligrafist.ru
REGISTRATOR-RU90.156.201.100 (- Russian Federation) +3 A record(s) 90.156.201.115 (AS25532, - Russian Federation)
90.156.201.48 (AS25532, - Russian Federation)
90.156.201.98 (AS25532, - Russian Federation)
2016-07-26 08:24Payment SiteCerber
unocl45trpuoefft.jsotn5.top
Alpnames Limited (n/a)
2016-07-26 05:56Payment SiteCerber
27lelchgcvs2wpm7.bestfordownload.click
Alpnames Limited (n/a)
2016-07-26 03:16Payment SiteCerber
4kqd3hmqgptupi3p.143h2a.top
Eranet International Limited (n/a)
2016-07-25 21:13Botnet C&CLocky
kwontdmplpnbl.pw
Namecheap208.100.26.234 (- United States)
2016-07-25 16:35Payment SiteCerber
pmenboeqhyrpvomq.yw4629.top
Alpnames Limited (n/a)
2016-07-25 15:58Payment SiteCerber
4kqd3hmqgptupi3p.859rkn.top
Eranet International Limited (n/a)
2016-07-25 14:44Payment SiteCerber
4kqd3hmqgptupi3p.62er3d.top
Alpnames Limited (n/a)
2016-07-25 14:43Payment SiteCerber
52uo5k3t73ypjije.lba61x.top
Alpnames Limited (n/a)
2016-07-25 14:09Distribution SiteLocky
stegnjaic.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-07-25 14:09Distribution SiteLocky
djk-st-arnual.de
(n/a)
2016-07-25 14:08Distribution SiteLocky
moloko-votkinsk.ru
RU-CENTER-RU195.208.1.109 (- Russian Federation)
2016-07-25 14:08Distribution SiteLocky
perceibe.50webs.com
GODADDY.COM, LLC162.210.101.126 (- United States)
2016-07-25 13:55Payment SiteCerber
52uo5k3t73ypjije.1bipa9.top
Alpnames Limited (n/a)
2016-07-25 13:39Payment SiteCerber
unocl45trpuoefft.ckw9fm.top
Eranet International Limited (n/a)
2016-07-25 13:17Payment SiteCerber
unocl45trpuoefft.u64rj2.top
Eranet International Limited (n/a)
2016-07-25 13:10Payment SiteCerber
pmenboeqhyrpvomq.wn4h1k.top
Eranet International Limited (n/a)
2016-07-25 12:46Distribution SiteLocky
www.aproso.de
81.169.145.66 (- Germany)
2016-07-25 12:46Distribution SiteLocky
r-p-b.de
(n/a)
2016-07-25 12:46Distribution SiteLocky
ostseeurlaub-tk.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-25 12:46Distribution SiteLocky
www.motoslittetrecime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-25 12:46Distribution SiteLocky
www.westline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-25 12:46Distribution SiteLocky
koushuen.co.jp
219.99.208.109 (- Japan)
2016-07-25 12:46Distribution SiteLocky
www.ciapparelli.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-25 12:46Distribution SiteLocky
moehakiba.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.46 (- United States)
2016-07-25 12:46Distribution SiteLocky
www.louislechien.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-07-25 12:46Distribution SiteLocky
www.tridi.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-07-25 12:46Distribution SiteLocky
www.gruetzi.es
87.98.231.2 (- Spain)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >