Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-01 12:04Distribution SiteLocky
www.agridiving.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-01 12:04Distribution SiteLocky
www.folkjuannepiu.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:04Distribution SiteLocky
www.courtesyweb.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:03Distribution SiteLocky
gam-e20.it
SOLODOMINI-REG85.18.11.68 (- Italy)
2016-09-01 12:03Distribution SiteLocky
postaldigitalrs.com.br
187.45.193.139 (- Brazil)
2016-09-01 12:02Distribution SiteLocky
michik.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-09-01 12:02Distribution SiteLocky
pp4_09_10_2s.republika.pl
213.180.150.17 (- Poland)
2016-09-01 12:02Distribution SiteLocky
www.dallaglio-nordin.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:02Distribution SiteLocky
srxrun.nobody.jp
112.140.42.29 (- Japan)
2016-09-01 12:02Distribution SiteLocky
lalarabbit.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-09-01 12:02Distribution SiteLocky
www.idiomestarradellas.com
NOMINALIA INTERNET S.L.185.177.152.107 (- Spain)
2016-09-01 12:02Distribution SiteLocky
ngenge.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.37 (- United States)
2016-09-01 12:02Distribution SiteLocky
zui9reica.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-09-01 12:02Distribution SiteLocky
olivier.coroenne.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 12:01Distribution SiteLocky
www.termoalbiate.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:01Distribution SiteLocky
mambarambaro.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 12:01Distribution SiteLocky
szkolagrojec.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-09-01 12:01Distribution SiteLocky
www.gebrvanorsouw.nl
Tele2 zakelijk62.250.4.180 (- Netherlands)
2016-09-01 12:00Distribution SiteLocky
www.texelvakantiehuisje.nl
Registrar.eu185.27.141.91 (- Netherlands)
2016-09-01 12:00Distribution SiteLocky
cest-pas-sorcierstreamflv.eurorscg.customers.artful.net
NETWORK SOLUTIONS, LLC.195.8.66.220 (- United Kingdom)
2016-09-01 12:00Distribution SiteLocky
www.archiviestoria.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 11:10Payment SiteCerber
4kqd3hmqgptupi3p.ix1upt.bid
Eranet International Limited (n/a)
2016-09-01 08:52Payment SiteCerber
unocl45trpuoefft.f17bam.bid
Eranet International Limited (n/a)
2016-09-01 08:37Payment SiteCerber
4kqd3hmqgptupi3p.cm5ohx.bid
Eranet International Limited (n/a)
2016-09-01 07:44Payment SiteCerber
wjtqjleommc4z46i.izyclz.bid
Eranet International Limited (n/a)
2016-09-01 07:31Distribution SiteLocky
www.francescafraioli.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 07:30Distribution SiteLocky
www.francogatta.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-01 07:29Distribution SiteLocky
virmalw.name
Eranet International Limited (n/a)
2016-09-01 07:28Distribution SiteLocky
www.kreso.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 07:26Distribution SiteLocky
www.fmpromedia.com
TUCOWS DOMAINS INC.195.78.215.76 (- Italy)
2016-09-01 07:25Distribution SiteLocky
www.francogatta.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-01 07:25Distribution SiteLocky
wangmewang.name
Eranet International Limited (n/a)
2016-09-01 07:23Distribution SiteLocky
timetobuymlw.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-01 07:23Distribution SiteLocky
malwinstall.wang
Todaynic com Inc (n/a)
2016-09-01 06:17Payment SiteCerber
wjtqjleommc4z46i.csv7o6.bid
Eranet International Limited (n/a)
2016-09-01 06:09Payment SiteCerber
wjtqjleommc4z46i.2y4t6f.bid
Eranet International Limited (n/a)
2016-09-01 05:37Payment SiteCerber
unocl45trpuoefft.tfmmby.bid
Eranet International Limited (n/a)
2016-09-01 05:35Payment SiteCerber
wjtqjleommc4z46i.uv39h5.bid
Eranet International Limited (n/a)
2016-09-01 05:32Distribution SiteLocky
instalserie.pt
81.88.57.70 (- Italy)
2016-09-01 05:32Distribution SiteLocky
www.hotelancorariviera.com
REGISTER.IT SPA80.91.55.42 (- Italy)
2016-09-01 05:32Distribution SiteLocky
72.47.222.40
n/a
2016-09-01 05:32Distribution SiteLocky
w07q93g5g.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:31Distribution SiteLocky
www.itogazaidan.jp
210.161.160.157 (- Japan)
2016-09-01 05:31Distribution SiteLocky
www.francescafraioli.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:31Distribution SiteLocky
malwinstall.wang
Todaynic com Inc (n/a)
2016-09-01 05:31Distribution SiteLocky
reaktywacja.pawlov.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 05:30Distribution SiteLocky
nkbzryw.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-09-01 05:30Distribution SiteLocky
www.download.extraslot.ru
R01-RU62.173.139.197 (- Russian Federation)
2016-09-01 05:30Distribution SiteLocky
members.chello.at
80.109.240.79 (- Austria)
2016-09-01 05:30Distribution SiteLocky
krahul.chytrak.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-09-01 05:29Distribution SiteLocky
www.avisgibellina.it
TISCALIDOMAIN-REG89.40.172.112 (- Italy)
2016-09-01 05:29Distribution SiteLocky
a-tconsulting.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-09-01 05:28Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 05:28Distribution SiteLocky
www.luigigiordano.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:28Distribution SiteLocky
www.helpinict.co.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.151 (- United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, - United Kingdom)
2016-09-01 05:28Distribution SiteLocky
www.redanchemical.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.33 (- Italy)
2016-09-01 05:28Distribution SiteLocky
www.download.extraslot.ru
R01-RU62.173.139.197 (- Russian Federation)
2016-09-01 05:28Distribution SiteLocky
nibis.de
213.23.76.90 (- Germany)
2016-09-01 05:28Distribution SiteLocky
bookinghotworld.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 05:27Distribution SiteLocky
finishcar.de
81.169.145.156 (- Germany)
2016-09-01 05:27Distribution SiteLocky
18vek.spb.ru
RU-CENTER-RU217.148.216.220 (- Russian Federation)
2016-09-01 05:27Distribution SiteLocky
dreamworksoffice.com
ENOM, INC.123.242.226.64 (- Hong Kong)
2016-09-01 05:27Distribution SiteLocky
www.avisgibellina.it
TISCALIDOMAIN-REG89.40.172.112 (- Italy)
2016-09-01 05:26Distribution SiteLocky
www.mediolina.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:26Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 05:26Distribution SiteLocky
www.itogazaidan.jp
210.161.160.157 (- Japan)
2016-09-01 05:26Distribution SiteLocky
www.assonet.org
Tucows Inc.195.78.215.76 (- Italy)
2016-09-01 05:25Distribution SiteLocky
www.end-motorsport.de
83.220.144.3 (- Germany)
2016-09-01 05:25Distribution SiteLocky
yhinas.hanagumori.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 05:25Distribution SiteLocky
www.redanchemical.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.33 (- Italy)
2016-09-01 05:25Distribution SiteLocky
roger.pierrieau.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 05:25Distribution SiteLocky
w07q93g5g.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:25Distribution SiteLocky
www.ieslamerced.es
62.42.230.17 (- Spain)
2016-09-01 05:25Distribution SiteLocky
18vek.spb.ru
RU-CENTER-RU217.148.216.220 (- Russian Federation)
2016-09-01 05:24Distribution SiteLocky
nkbzryw.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-09-01 05:24Distribution SiteLocky
www.hotelancorariviera.com
REGISTER.IT SPA80.91.55.42 (- Italy)
2016-09-01 05:24Distribution SiteLocky
alc-okadakogyo.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]210.157.28.18 (- Japan)
2016-09-01 05:24Distribution SiteLocky
www.personalshoppingservice.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:24Distribution SiteLocky
a-tconsulting.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-09-01 05:06Payment SiteCerber
wjtqjleommc4z46i.m33d4b.bid
Eranet International Limited (n/a)
2016-09-01 05:03Distribution SiteLocky
www.drvandenbroeck.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 05:03Distribution SiteLocky
www.puntoit-informatica.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:03Distribution SiteLocky
hikodge.zashiki.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 05:03Distribution SiteLocky
specialist.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:03Distribution SiteLocky
www.Logopaedie-Tisch.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:03Distribution SiteLocky
www.bebrudy.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-01 05:03Distribution SiteLocky
rejoincomp2.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-01 05:03Distribution SiteLocky
web2.v45.ncsrv.de
89.110.144.59 (- Germany)
2016-09-01 05:02Distribution SiteLocky
www.gadtrento.it
TISCALIDOMAIN-REG89.46.104.14 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.europegreen.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.peterswebsite.dommel.be
SCHEDOM NV / DOMMEL.COM193.109.184.81 (- Belgium)
2016-09-01 05:02Distribution SiteLocky
cyfrowemotywy.cba.pl
Abc Hosting Ltd.95.211.80.4 (- Netherlands)
2016-09-01 05:02Distribution SiteLocky
212.26.129.68
n/a
2016-09-01 05:02Distribution SiteLocky
www.plastimonza.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:02Distribution SiteLocky
79.96.153.93
(n/a)
2016-09-01 05:02Payment SiteCerber
unocl45trpuoefft.j0cia7.bid
Eranet International Limited (n/a)
2016-09-01 05:02Distribution SiteLocky
www.mediawareonline.it
INIT-REG212.104.43.3 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.smoes.net
TUCOWS DOMAINS INC.62.173.164.20 (- Italy)
2016-09-01 05:02Distribution SiteLocky
kallait.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-09-01 05:02Payment SiteCerber
pmenboeqhyrpvomq.8kcfnk.bid
Eranet International Limited (n/a)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >