Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-02 14:20Distribution SiteLocky
albertowe.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 14:20Distribution SiteLocky
www.alessandrocangiano.com
TUCOWS DOMAINS INC.195.78.215.76 (- Italy)
2016-09-02 14:18Distribution SiteLocky
www.motortecnica.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 14:18Distribution SiteLocky
www.informaonline.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 14:17Distribution SiteLocky
lokum1985.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-09-02 14:16Distribution SiteLocky
www.anacuamic.com
ENOM, INC.95.211.113.12 (- Netherlands)
2016-09-02 14:15Distribution SiteLocky
www.caminettilcd.it
MCLINK-REG (n/a)
2016-09-02 14:13Distribution SiteLocky
www.threshold-online.co.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.151 (- United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, - United Kingdom)
2016-09-02 14:12Distribution SiteLocky
news.oboyle.ro
ICI - ROTLD (n/a)
2016-09-02 14:12Distribution SiteLocky
maxshoppppsr.biz
ERANET INTERNATIONAL LIMITED (n/a)
2016-09-02 14:11Distribution SiteLocky
www.cortesidesign.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 14:09Distribution SiteLocky
e-gmp.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-09-02 14:07Botnet C&CLocky
eywlmqugxx.info
Dynadot, LLC69.195.129.70 (- United States)
2016-09-02 11:20Payment SiteCerber
unocl45trpuoefft.gg4dgp.bid
Eranet International Limited (n/a)
2016-09-02 11:08Payment SiteCerber
4kqd3hmqgptupi3p.boxtimed.gdn
AlpNames Limited (n/a)
2016-09-02 10:43Payment SiteCerber
52uo5k3t73ypjije.9sfrr0.bid
Eranet International Limited (n/a)
2016-09-02 10:31Payment SiteCerber
4kqd3hmqgptupi3p.effortany.win
Alpnames Limited (n/a)
2016-09-02 10:25Payment SiteCerber
52uo5k3t73ypjije.c3fz3z.bid
Eranet International Limited (n/a)
2016-09-02 10:22Payment SiteCerber
52uo5k3t73ypjije.k8ytej.bid
Eranet International Limited (n/a)
2016-09-02 07:53Distribution SiteLocky
www.montegelato.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 07:51Distribution SiteLocky
rosivani.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-09-02 07:48Distribution SiteLocky
sitio655.vtrbandaancha.net
REGISTER.COM, INC.200.83.4.62 (- Chile)
2016-09-02 07:44Payment SiteCerber
52uo5k3t73ypjije.ldsl8m.bid
Eranet International Limited (n/a)
2016-09-02 07:34Payment SiteCerber
unocl45trpuoefft.vmomcc.bid
Eranet International Limited (n/a)
2016-09-02 07:27Payment SiteCerber
unocl45trpuoefft.igpfcu.bid
Eranet International Limited (n/a)
2016-09-02 07:13Payment SiteCerber
52uo5k3t73ypjije.4jub4e.bid
Eranet International Limited (n/a)
2016-09-02 06:55Payment SiteCerber
52uo5k3t73ypjije.x9kjcn.bid
Eranet International Limited (n/a)
2016-09-02 06:43Payment SiteCerber
52uo5k3t73ypjije.k0dcd2.bid
Eranet International Limited (n/a)
2016-09-02 06:25Payment SiteCerber
4kqd3hmqgptupi3p.g7kcux.bid
Eranet International Limited (n/a)
2016-09-02 05:26Payment SiteCerber
52uo5k3t73ypjije.kt70uk.bid
Eranet International Limited (n/a)
2016-09-02 05:09Distribution SiteLocky
www.one-clap.jp
202.224.63.6 (- Japan)
2016-09-02 05:08Distribution SiteLocky
josemedina.com
TUCOWS DOMAINS INC.67.225.176.60 (- United States)
2016-09-02 05:08Distribution SiteLocky
www.bytove.jadro.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-09-02 05:07Distribution SiteLocky
aivee.koiwazurai.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-02 05:07Distribution SiteLocky
sp-moto.ru
REGTIME-RU37.230.114.67 (- Russian Federation)
2016-09-02 05:07Distribution SiteLocky
www.plumbntile.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-02 05:07Distribution SiteLocky
portadeenrolar.ind.br
186.202.126.199 (- Brazil)
2016-09-02 05:06Distribution SiteLocky
www.gsprzemkow.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-09-02 05:06Distribution SiteLocky
194.28.172.166
n/a
2016-09-02 05:06Distribution SiteLocky
www.ccnprodusenaturiste.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-09-02 05:06Distribution SiteLocky
www.john.edmunds.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-02 05:06Distribution SiteLocky
www.vanetti.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 05:06Distribution SiteLocky
yggithuq.utawebhost.at
195.248.63.109 (- Austria)
2016-09-02 05:06Distribution SiteLocky
sojasaude.com.br
187.45.195.136 (- Brazil)
2016-09-02 05:06Distribution SiteLocky
www.spiritueelcentrumaum.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-02 05:05Distribution SiteLocky
inge28.mytactis.com
OVH (n/a)
2016-09-02 05:05Distribution SiteLocky
www.automac.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-02 05:04Distribution SiteLocky
www.erretisnc.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 05:04Distribution SiteLocky
toukontoutaukaiazalea.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-09-02 05:04Distribution SiteLocky
www.alpstaxi.co.jp
211.134.181.38 (- Japan)
2016-09-02 05:04Distribution SiteLocky
t-schoener.de
(n/a)
2016-09-02 05:04Distribution SiteLocky
6rota.costav.edusite.ru
RU-CENTER-RU85.193.69.29 (- Russian Federation)
2016-09-02 05:04Distribution SiteLocky
www.xolod-teplo.ru
REGTIME-RU87.242.73.75 (- Russian Federation)
2016-09-02 05:03Distribution SiteLocky
quinteam.com
DINAHOSTING SL46.17.142.220 (- Spain)
2016-09-02 05:03Distribution SiteLocky
www.empolio.com
ENOM, INC.213.204.1.56 (- Italy)
2016-09-02 05:03Distribution SiteLocky
mixup0813.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-09-02 05:03Distribution SiteLocky
andante-co.jp
153.149.155.32 (- Japan)
2016-09-02 05:03Distribution SiteLocky
bajkowestokrotki.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 05:03Botnet C&CLocky
ssvylrn.pw
Registrar of Domain Names REG.RU[...]n/a
2016-09-02 05:02Distribution SiteLocky
www.beniculturali.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 05:01Distribution SiteLocky
foerschl.gmxhome.de
82.165.62.70 (- Germany)
2016-09-02 05:01Distribution SiteLocky
bushman-rest.com
CRONON AG81.169.145.82 (- Germany)
2016-09-02 05:01Distribution SiteLocky
www.parrucchieriagiacomo.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 05:01Distribution SiteLocky
www.trauchgauer-weihnachtsmarkt.de
109.237.140.20 (- Germany)
2016-09-02 05:01Distribution SiteLocky
body-fitness.net
NETWORK SOLUTIONS, LLC.81.88.57.68 (- Italy)
2016-09-02 05:00Distribution SiteLocky
www.dietmar-bernhard.de
(n/a)
2016-09-02 05:00Distribution SiteLocky
www.aktion-zukunft-gestalten.info
Ascio Technologies, Inc. Danmark[...]81.169.145.224 (- Germany)
2016-09-02 05:00Distribution SiteLocky
www.coropeppinumereu.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 05:00Distribution SiteLocky
sebangou8.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-09-02 05:00Distribution SiteLocky
namadol.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.51 (- United States)
2016-09-02 05:00Distribution SiteLocky
danzig.vtrbandaancha.net
REGISTER.COM, INC.200.83.4.62 (- Chile)
2016-09-02 05:00Botnet C&CLocky
149.154.152.108
149.154.152.108 (- Austria)
2016-09-02 05:00Botnet C&CLocky
212.109.192.235
212.109.192.235 (- Russian Federation)
2016-09-02 04:59Distribution SiteLocky
vimp.hi2.ro
ICI - ROTLD (n/a)
2016-09-02 04:59Distribution SiteLocky
www.meallservice.it
TISCALIDOMAIN-REG62.149.128.45 (- Italy)
2016-09-02 04:59Distribution SiteLocky
pennylanecupcakes.com.au
Web Address Registration64.37.52.172 (- United States)
2016-09-02 04:58Distribution SiteLocky
www.malicioso.net
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-09-02 04:58Distribution SiteLocky
capannoneinliguria.com
OWN IDENTITY, INC84.33.0.247 (- Italy)
2016-09-02 04:58Distribution SiteLocky
www.porchettadicolledara.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 04:58Distribution SiteLocky
www.sieas.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.28 (- Italy)
2016-09-02 04:58Distribution SiteLocky
www.radicegioielli.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.19 (- Italy)
2016-09-02 04:57Distribution SiteLocky
www.callisto.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 04:57Distribution SiteLocky
www.whitakerpd.co.uk
LCN.com Ltd94.126.40.48 (- United Kingdom)
2016-09-02 04:57Distribution SiteLocky
sakon118.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-09-02 04:56Distribution SiteLocky
compitrade.ru
RU-CENTER-RU195.208.0.136 (- Russian Federation)
2016-09-02 04:12Payment SiteCerber
wjtqjleommc4z46i.o8hpwj.top
Eranet International Limited (n/a)
2016-09-02 02:46Payment SiteCerber
unocl45trpuoefft.uwckha.top
Eranet International Limited (n/a)
2016-09-02 02:34Payment SiteCerber
unocl45trpuoefft.vkslju.bid
Eranet International Limited (n/a)
2016-09-02 02:17Payment SiteCerber
52uo5k3t73ypjije.m33d4b.bid
Eranet International Limited (n/a)
2016-09-02 01:56Payment SiteCerber
4kqd3hmqgptupi3p.91006j.bid
Eranet International Limited (n/a)
2016-09-02 01:21Payment SiteCerber
52uo5k3t73ypjije.y12acl.bid
Eranet International Limited (n/a)
2016-09-02 00:01Payment SiteCerber
unocl45trpuoefft.kf1gxm.bid
Eranet International Limited (n/a)
2016-09-01 23:56Payment SiteCerber
wjtqjleommc4z46i.jal9lk.bid
Eranet International Limited (n/a)
2016-09-01 23:48Payment SiteCerber
wjtqjleommc4z46i.gg4dgp.bid
Eranet International Limited (n/a)
2016-09-01 23:03Payment SiteCerber
unocl45trpuoefft.czzg7f.bid
Eranet International Limited (n/a)
2016-09-01 22:19Payment SiteCerber
4kqd3hmqgptupi3p.uwckha.top
Eranet International Limited (n/a)
2016-09-01 18:15Payment SiteCerber
4kqd3hmqgptupi3p.cfu46r.bid
Eranet International Limited (n/a)
2016-09-01 17:17Payment SiteCerber
4kqd3hmqgptupi3p.6j7jcn.bid
Eranet International Limited (n/a)
2016-09-01 16:09Distribution SiteLocky
jvelizg.vtrbandaancha.net
REGISTER.COM, INC.200.83.4.62 (- Chile)
2016-09-01 16:07Distribution SiteLocky
iftikharchaudhry.50webs.com
GODADDY.COM, LLC162.210.101.108 (- United States)

# of rows displayed: 100
# of entries in database: 9'210

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >