Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-01 16:07Distribution SiteLocky
iftikharchaudhry.50webs.com
GODADDY.COM, LLC162.210.101.108 (- United States)
2016-09-01 16:04Distribution SiteLocky
www.yacht-market.eu
DotRoll Kft.91.195.240.70 (- Germany)
2016-09-01 15:45Distribution SiteLocky
www.bioinfotst.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:45Distribution SiteLocky
www.adament.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:43Distribution SiteLocky
forum.sandalcraft.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:42Distribution SiteLocky
www.infoteria.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:41Distribution SiteLocky
rhanwid.com
OVH213.186.33.24 (- France)
2016-09-01 15:40Distribution SiteLocky
ksiega.solidworks.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:38Distribution SiteLocky
shantia.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:22Payment SiteCerber
wjtqjleommc4z46i.y12acl.bid
Eranet International Limited (n/a)
2016-09-01 14:50Payment SiteCerber
wjtqjleommc4z46i.nxmu0x.bid
Eranet International Limited (n/a)
2016-09-01 13:30Payment SiteCerber
4kqd3hmqgptupi3p.lobulz.bid
Eranet International Limited (n/a)
2016-09-01 12:12Distribution SiteLocky
www.coseincredibili.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:12Distribution SiteLocky
dashman.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.45 (- United States)
2016-09-01 12:11Distribution SiteLocky
www.cmg-ingegneria.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:10Distribution SiteLocky
wccf.huuryuu.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 12:10Distribution SiteLocky
www.smees.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 12:10Distribution SiteLocky
imperium.nazory.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-09-01 12:10Distribution SiteLocky
chal4.co.uk
Portfast Ltd130.185.144.97 (- United Kingdom)
2016-09-01 12:09Distribution SiteLocky
www.engware.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:09Distribution SiteLocky
www.gengokk.co.jp
202.224.59.191 (- Japan)
2016-09-01 12:09Distribution SiteLocky
www.beck-kituzo.hu
84.2.38.70 (- Hungary)
2016-09-01 12:09Distribution SiteLocky
kissfm.rdsor.ro
ICI - ROTLD (n/a)
2016-09-01 12:09Distribution SiteLocky
reklamnibannery.wz.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-09-01 12:08Distribution SiteLocky
sopranolady7.wang
(n/a)
2016-09-01 12:08Distribution SiteLocky
www.ovadese.info
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 12:08Distribution SiteLocky
sac360.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.42 (- United States)
2016-09-01 12:08Distribution SiteLocky
www.space.bnet.at
(n/a)
2016-09-01 12:07Distribution SiteLocky
www.richtenberg.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 12:07Distribution SiteLocky
branchjp.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.41 (- United States)
2016-09-01 12:07Distribution SiteLocky
www.aldesco.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:07Distribution SiteLocky
hotelimperium.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-09-01 12:07Distribution SiteLocky
kanalturkvod-org.ercdn.net
OVH185.107.80.1 (- Netherlands) +1 A record(s) 46.166.187.15 (AS43350, - Netherlands)
2016-09-01 12:07Distribution SiteLocky
dcqoutlet.es
134.0.11.123 (- Spain)
2016-09-01 12:07Distribution SiteLocky
158.195.68.10
n/a
2016-09-01 12:06Distribution SiteLocky
topsecret.x.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.51 (- United States)
2016-09-01 12:06Distribution SiteLocky
knuddelwuschel.de
(n/a)
2016-09-01 12:06Distribution SiteLocky
school3.50webs.com
GODADDY.COM, LLC162.210.101.26 (- United States)
2016-09-01 12:06Distribution SiteLocky
nevrincea.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-09-01 12:05Distribution SiteLocky
kreativmanagement.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 12:05Distribution SiteLocky
www.fpizzuto.eu
Ascio Technologies Inc. (n/a)
2016-09-01 12:05Distribution SiteLocky
www.gunaldy.com
GODADDY.COM, LLC31.22.4.108 (- United Kingdom)
2016-09-01 12:05Distribution SiteLocky
www.mikeg7hen.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-01 12:04Distribution SiteLocky
kawasima0506.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.62 (- United States)
2016-09-01 12:04Distribution SiteLocky
denis-benker.de
(n/a)
2016-09-01 12:04Distribution SiteLocky
www.agridiving.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-01 12:04Distribution SiteLocky
www.folkjuannepiu.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:04Distribution SiteLocky
www.courtesyweb.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:03Distribution SiteLocky
gam-e20.it
SOLODOMINI-REG85.18.11.68 (- Italy)
2016-09-01 12:03Distribution SiteLocky
postaldigitalrs.com.br
187.45.193.139 (- Brazil)
2016-09-01 12:02Distribution SiteLocky
michik.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-09-01 12:02Distribution SiteLocky
pp4_09_10_2s.republika.pl
213.180.150.17 (- Poland)
2016-09-01 12:02Distribution SiteLocky
www.dallaglio-nordin.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:02Distribution SiteLocky
srxrun.nobody.jp
112.140.42.29 (- Japan)
2016-09-01 12:02Distribution SiteLocky
lalarabbit.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-09-01 12:02Distribution SiteLocky
www.idiomestarradellas.com
NOMINALIA INTERNET S.L. (n/a)
2016-09-01 12:02Distribution SiteLocky
ngenge.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-09-01 12:02Distribution SiteLocky
zui9reica.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-09-01 12:02Distribution SiteLocky
olivier.coroenne.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 12:01Distribution SiteLocky
www.termoalbiate.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:01Distribution SiteLocky
mambarambaro.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 12:01Distribution SiteLocky
szkolagrojec.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-09-01 12:01Distribution SiteLocky
www.gebrvanorsouw.nl
Tele2 zakelijk62.250.4.180 (- Netherlands)
2016-09-01 12:00Distribution SiteLocky
www.texelvakantiehuisje.nl
Registrar.eu185.27.141.91 (- Netherlands)
2016-09-01 12:00Distribution SiteLocky
cest-pas-sorcierstreamflv.eurorscg.customers.artful.net
NETWORK SOLUTIONS, LLC.195.8.66.220 (- United Kingdom)
2016-09-01 12:00Distribution SiteLocky
www.archiviestoria.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 11:10Payment SiteCerber
4kqd3hmqgptupi3p.ix1upt.bid
Eranet International Limited (n/a)
2016-09-01 08:52Payment SiteCerber
unocl45trpuoefft.f17bam.bid
Eranet International Limited (n/a)
2016-09-01 08:37Payment SiteCerber
4kqd3hmqgptupi3p.cm5ohx.bid
Eranet International Limited (n/a)
2016-09-01 07:44Payment SiteCerber
wjtqjleommc4z46i.izyclz.bid
Eranet International Limited (n/a)
2016-09-01 07:28Distribution SiteLocky
www.kreso.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 07:26Distribution SiteLocky
www.fmpromedia.com
TUCOWS DOMAINS INC.195.78.215.76 (- Italy)
2016-09-01 07:25Distribution SiteLocky
www.francogatta.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-01 07:25Distribution SiteLocky
wangmewang.name
Eranet International Limited (n/a)
2016-09-01 07:23Distribution SiteLocky
timetobuymlw.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-01 06:17Payment SiteCerber
wjtqjleommc4z46i.csv7o6.bid
Eranet International Limited (n/a)
2016-09-01 06:09Payment SiteCerber
wjtqjleommc4z46i.2y4t6f.bid
Eranet International Limited (n/a)
2016-09-01 05:37Payment SiteCerber
unocl45trpuoefft.tfmmby.bid
Eranet International Limited (n/a)
2016-09-01 05:35Payment SiteCerber
wjtqjleommc4z46i.uv39h5.bid
Eranet International Limited (n/a)
2016-09-01 05:32Distribution SiteLocky
instalserie.pt
81.88.57.70 (- Italy)
2016-09-01 05:32Distribution SiteLocky
72.47.222.40
n/a
2016-09-01 05:31Distribution SiteLocky
www.francescafraioli.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:31Distribution SiteLocky
malwinstall.wang
(n/a)
2016-09-01 05:31Distribution SiteLocky
reaktywacja.pawlov.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 05:30Distribution SiteLocky
members.chello.at
80.109.240.79 (- Austria)
2016-09-01 05:30Distribution SiteLocky
krahul.chytrak.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-09-01 05:28Distribution SiteLocky
www.luigigiordano.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:28Distribution SiteLocky
www.helpinict.co.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.151 (- United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, - United Kingdom)
2016-09-01 05:28Distribution SiteLocky
www.download.extraslot.ru
R01-RU62.173.139.197 (- Russian Federation)
2016-09-01 05:28Distribution SiteLocky
nibis.de
213.23.76.90 (- Germany)
2016-09-01 05:28Distribution SiteLocky
bookinghotworld.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 05:27Distribution SiteLocky
finishcar.de
81.169.145.156 (- Germany)
2016-09-01 05:27Distribution SiteLocky
dreamworksoffice.com
ENOM, INC.123.242.226.64 (- Hong Kong)
2016-09-01 05:27Distribution SiteLocky
www.avisgibellina.it
TISCALIDOMAIN-REG89.40.172.112 (- Italy)
2016-09-01 05:26Distribution SiteLocky
www.mediolina.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:26Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 05:26Distribution SiteLocky
www.itogazaidan.jp
210.161.160.157 (- Japan)
2016-09-01 05:26Distribution SiteLocky
www.assonet.org
Tucows Inc.195.78.215.76 (- Italy)
2016-09-01 05:25Distribution SiteLocky
www.end-motorsport.de
83.220.144.3 (- Germany)
2016-09-01 05:25Distribution SiteLocky
yhinas.hanagumori.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)

# of rows displayed: 100
# of entries in database: 9'211

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >