Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-02 04:59Distribution SiteLocky
vimp.hi2.ro
ICI - ROTLD (n/a)
2016-09-02 04:59Distribution SiteLocky
www.meallservice.it
TISCALIDOMAIN-REG62.149.128.45 (- Italy)
2016-09-02 04:59Distribution SiteLocky
pennylanecupcakes.com.au
Web Address Registration (n/a)
2016-09-02 04:58Distribution SiteLocky
www.malicioso.net
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-09-02 04:58Distribution SiteLocky
capannoneinliguria.com
OWN IDENTITY, INC84.33.0.247 (- Italy)
2016-09-02 04:58Distribution SiteLocky
www.porchettadicolledara.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-02 04:58Distribution SiteLocky
www.sieas.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]31.11.34.119 (- Italy)
2016-09-02 04:58Distribution SiteLocky
www.radicegioielli.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-02 04:57Distribution SiteLocky
www.callisto.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 04:57Distribution SiteLocky
www.whitakerpd.co.uk
LCN.com Ltd94.126.40.48 (- United Kingdom)
2016-09-02 04:57Distribution SiteLocky
sakon118.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.136 (- United States)
2016-09-02 04:56Distribution SiteLocky
compitrade.ru
RU-CENTER-RU195.208.1.107 (- Russian Federation)
2016-09-02 04:12Payment SiteCerber
wjtqjleommc4z46i.o8hpwj.top
Eranet International Limited (n/a)
2016-09-02 02:46Payment SiteCerber
unocl45trpuoefft.uwckha.top
Eranet International Limited (n/a)
2016-09-02 02:34Payment SiteCerber
unocl45trpuoefft.vkslju.bid
Eranet International Limited (n/a)
2016-09-02 02:17Payment SiteCerber
52uo5k3t73ypjije.m33d4b.bid
Eranet International Limited (n/a)
2016-09-02 01:56Payment SiteCerber
4kqd3hmqgptupi3p.91006j.bid
Eranet International Limited (n/a)
2016-09-02 01:21Payment SiteCerber
52uo5k3t73ypjije.y12acl.bid
Eranet International Limited (n/a)
2016-09-02 00:01Payment SiteCerber
unocl45trpuoefft.kf1gxm.bid
Eranet International Limited (n/a)
2016-09-01 23:56Payment SiteCerber
wjtqjleommc4z46i.jal9lk.bid
Eranet International Limited (n/a)
2016-09-01 23:48Payment SiteCerber
wjtqjleommc4z46i.gg4dgp.bid
Eranet International Limited (n/a)
2016-09-01 23:03Payment SiteCerber
unocl45trpuoefft.czzg7f.bid
Eranet International Limited (n/a)
2016-09-01 22:19Payment SiteCerber
4kqd3hmqgptupi3p.uwckha.top
Eranet International Limited (n/a)
2016-09-01 18:15Payment SiteCerber
4kqd3hmqgptupi3p.cfu46r.bid
Eranet International Limited (n/a)
2016-09-01 17:17Payment SiteCerber
4kqd3hmqgptupi3p.6j7jcn.bid
Eranet International Limited (n/a)
2016-09-01 16:09Distribution SiteLocky
jvelizg.vtrbandaancha.net
REGISTER.COM, INC.200.83.3.52 (- Chile)
2016-09-01 16:07Distribution SiteLocky
iftikharchaudhry.50webs.com
GODADDY.COM, LLC162.210.101.108 (- United States)
2016-09-01 16:04Distribution SiteLocky
www.yacht-market.eu
DotRoll Kft.104.28.28.235 (- United States) +1 A record(s) 104.28.29.235 (AS13335, - United States)
2016-09-01 15:45Distribution SiteLocky
www.bioinfotst.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:45Distribution SiteLocky
www.adament.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:43Distribution SiteLocky
forum.sandalcraft.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:42Distribution SiteLocky
www.infoteria.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:41Distribution SiteLocky
rhanwid.com
OVH213.186.33.24 (- France)
2016-09-01 15:40Distribution SiteLocky
ksiega.solidworks.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:38Distribution SiteLocky
shantia.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 15:22Payment SiteCerber
wjtqjleommc4z46i.y12acl.bid
Eranet International Limited (n/a)
2016-09-01 14:50Payment SiteCerber
wjtqjleommc4z46i.nxmu0x.bid
Eranet International Limited (n/a)
2016-09-01 13:30Payment SiteCerber
4kqd3hmqgptupi3p.lobulz.bid
Eranet International Limited (n/a)
2016-09-01 12:12Distribution SiteLocky
www.kardborren.se
Loopia AB91.189.41.173 (- Sweden)
2016-09-01 12:12Distribution SiteLocky
www.coseincredibili.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:12Distribution SiteLocky
dashman.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-09-01 12:11Distribution SiteLocky
www.cmg-ingegneria.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:11Distribution SiteLocky
karinschacht.addr.com
DOMAIN.COM, LLC18.218.10.100 (- United States)
2016-09-01 12:10Distribution SiteLocky
wccf.huuryuu.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 12:10Distribution SiteLocky
www.smees.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 12:10Distribution SiteLocky
imperium.nazory.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-09-01 12:10Distribution SiteLocky
chal4.co.uk
Portfast Ltd130.185.144.97 (- United Kingdom)
2016-09-01 12:09Distribution SiteLocky
www.engware.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:09Distribution SiteLocky
www.gengokk.co.jp
202.224.59.191 (- Japan)
2016-09-01 12:09Distribution SiteLocky
www.beck-kituzo.hu
84.2.38.70 (- Hungary)
2016-09-01 12:09Distribution SiteLocky
kissfm.rdsor.ro
ICI - ROTLD (n/a)
2016-09-01 12:09Distribution SiteLocky
reklamnibannery.wz.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-09-01 12:08Distribution SiteLocky
sopranolady7.wang
Todaynic com Inc (n/a)
2016-09-01 12:08Distribution SiteLocky
www.ovadese.info
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 12:08Distribution SiteLocky
sac360.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.41 (- United States)
2016-09-01 12:08Distribution SiteLocky
www.space.bnet.at
(n/a)
2016-09-01 12:07Distribution SiteLocky
www.richtenberg.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 12:07Distribution SiteLocky
branchjp.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.38 (- United States)
2016-09-01 12:07Distribution SiteLocky
www.aldesco.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:07Distribution SiteLocky
hotelimperium.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-09-01 12:07Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 12:07Distribution SiteLocky
kanalturkvod-org.ercdn.net
OVH (n/a)
2016-09-01 12:07Distribution SiteLocky
dcqoutlet.es
(n/a)
2016-09-01 12:07Distribution SiteLocky
158.195.68.10
n/a
2016-09-01 12:06Distribution SiteLocky
topsecret.x.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.171 (- United States)
2016-09-01 12:06Distribution SiteLocky
knuddelwuschel.de
(n/a)
2016-09-01 12:06Distribution SiteLocky
school3.50webs.com
GODADDY.COM, LLC162.210.101.26 (- United States)
2016-09-01 12:06Distribution SiteLocky
nevrincea.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-09-01 12:05Distribution SiteLocky
kreativmanagement.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 12:05Distribution SiteLocky
www.fpizzuto.eu
Ascio Technologies Inc. (n/a)
2016-09-01 12:05Distribution SiteLocky
www.gunaldy.com
GODADDY.COM, LLC192.185.20.70 (- United States)
2016-09-01 12:05Distribution SiteLocky
www.mikeg7hen.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-01 12:04Distribution SiteLocky
kawasima0506.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-09-01 12:04Distribution SiteLocky
denis-benker.de
(n/a)
2016-09-01 12:04Distribution SiteLocky
www.agridiving.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-01 12:04Distribution SiteLocky
www.folkjuannepiu.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:04Distribution SiteLocky
www.courtesyweb.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 12:03Distribution SiteLocky
gam-e20.it
SOLODOMINI-REG164.132.215.202 (- France)
2016-09-01 12:03Distribution SiteLocky
postaldigitalrs.com.br
187.45.193.139 (- Brazil)
2016-09-01 12:02Distribution SiteLocky
michik.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-09-01 12:02Distribution SiteLocky
pp4_09_10_2s.republika.pl
213.180.141.189 (- Poland)
2016-09-01 12:02Distribution SiteLocky
www.dallaglio-nordin.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:02Distribution SiteLocky
srxrun.nobody.jp
112.140.42.29 (- Japan)
2016-09-01 12:02Distribution SiteLocky
lalarabbit.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-09-01 12:02Distribution SiteLocky
www.idiomestarradellas.com
NOMINALIA INTERNET S.L.185.177.152.107 (- Spain)
2016-09-01 12:02Distribution SiteLocky
ngenge.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-09-01 12:02Distribution SiteLocky
zui9reica.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-09-01 12:02Distribution SiteLocky
olivier.coroenne.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 12:01Distribution SiteLocky
www.termoalbiate.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 12:01Distribution SiteLocky
mambarambaro.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 12:01Distribution SiteLocky
szkolagrojec.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-09-01 12:01Distribution SiteLocky
www.gebrvanorsouw.nl
Tele2 zakelijk62.250.4.180 (- Netherlands)
2016-09-01 12:00Distribution SiteLocky
www.texelvakantiehuisje.nl
Registrar.eu217.182.3.6 (- France)
2016-09-01 12:00Distribution SiteLocky
cest-pas-sorcierstreamflv.eurorscg.customers.artful.net
NETWORK SOLUTIONS, LLC. (n/a)
2016-09-01 12:00Distribution SiteLocky
www.archiviestoria.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 11:10Payment SiteCerber
4kqd3hmqgptupi3p.ix1upt.bid
Eranet International Limited (n/a)
2016-09-01 08:52Payment SiteCerber
unocl45trpuoefft.f17bam.bid
Eranet International Limited (n/a)
2016-09-01 08:37Payment SiteCerber
4kqd3hmqgptupi3p.cm5ohx.bid
Eranet International Limited (n/a)
2016-09-01 07:44Payment SiteCerber
wjtqjleommc4z46i.izyclz.bid
Eranet International Limited (n/a)
2016-09-01 07:31Distribution SiteLocky
www.francescafraioli.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >