Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-01 07:30Distribution SiteLocky
www.francogatta.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-01 07:29Distribution SiteLocky
virmalw.name
Eranet International Limited (n/a)
2016-09-01 07:28Distribution SiteLocky
www.kreso.it
TISCALIDOMAIN-REG (n/a)
2016-09-01 07:26Distribution SiteLocky
www.fmpromedia.com
TUCOWS DOMAINS INC.81.31.155.170 (- Italy)
2016-09-01 07:25Distribution SiteLocky
www.francogatta.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-01 07:25Distribution SiteLocky
wangmewang.name
Eranet International Limited (n/a)
2016-09-01 07:23Distribution SiteLocky
timetobuymlw.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-01 07:23Distribution SiteLocky
malwinstall.wang
Todaynic com Inc (n/a)
2016-09-01 06:17Payment SiteCerber
wjtqjleommc4z46i.csv7o6.bid
Eranet International Limited (n/a)
2016-09-01 06:09Payment SiteCerber
wjtqjleommc4z46i.2y4t6f.bid
Eranet International Limited (n/a)
2016-09-01 05:37Payment SiteCerber
unocl45trpuoefft.tfmmby.bid
Eranet International Limited (n/a)
2016-09-01 05:35Payment SiteCerber
wjtqjleommc4z46i.uv39h5.bid
Eranet International Limited (n/a)
2016-09-01 05:32Distribution SiteLocky
instalserie.pt
185.2.4.104 (- Italy)
2016-09-01 05:32Distribution SiteLocky
www.hotelancorariviera.com
REGISTER.IT SPA176.227.171.75 (- Italy)
2016-09-01 05:32Distribution SiteLocky
72.47.222.40
n/a
2016-09-01 05:32Distribution SiteLocky
w07q93g5g.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:31Distribution SiteLocky
www.itogazaidan.jp
210.161.160.157 (- Japan)
2016-09-01 05:31Distribution SiteLocky
www.francescafraioli.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:31Distribution SiteLocky
malwinstall.wang
Todaynic com Inc (n/a)
2016-09-01 05:31Distribution SiteLocky
reaktywacja.pawlov.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-01 05:30Distribution SiteLocky
nkbzryw.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-09-01 05:30Distribution SiteLocky
www.download.extraslot.ru
R01-RU62.173.139.197 (- Russian Federation)
2016-09-01 05:30Distribution SiteLocky
members.chello.at
80.109.240.79 (- Austria)
2016-09-01 05:30Distribution SiteLocky
krahul.chytrak.cz
REG-STABLE185.64.219.7 (- Czech Republic)
2016-09-01 05:29Distribution SiteLocky
www.avisgibellina.it
TISCALIDOMAIN-REG89.40.172.112 (- Italy)
2016-09-01 05:29Distribution SiteLocky
a-tconsulting.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-09-01 05:28Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 05:28Distribution SiteLocky
www.luigigiordano.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:28Distribution SiteLocky
www.helpinict.co.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.151 (- United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, - United Kingdom)
2016-09-01 05:28Distribution SiteLocky
www.redanchemical.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-01 05:28Distribution SiteLocky
www.download.extraslot.ru
R01-RU62.173.139.197 (- Russian Federation)
2016-09-01 05:28Distribution SiteLocky
nibis.de
88.99.140.125 (- Germany)
2016-09-01 05:28Distribution SiteLocky
bookinghotworld.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-01 05:27Distribution SiteLocky
finishcar.de
(n/a)
2016-09-01 05:27Distribution SiteLocky
18vek.spb.ru
RU-CENTER-RU217.107.34.41 (- Russian Federation)
2016-09-01 05:27Distribution SiteLocky
dreamworksoffice.com
ENOM, INC.123.242.224.116 (- Hong Kong)
2016-09-01 05:27Distribution SiteLocky
www.avisgibellina.it
TISCALIDOMAIN-REG89.40.172.112 (- Italy)
2016-09-01 05:26Distribution SiteLocky
www.mediolina.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:26Distribution SiteLocky
files.renderings.com
ENOM, INC.98.129.229.24 (- United States)
2016-09-01 05:26Distribution SiteLocky
www.itogazaidan.jp
210.161.160.157 (- Japan)
2016-09-01 05:26Distribution SiteLocky
www.assonet.org
Tucows Inc.195.110.124.133 (- Italy)
2016-09-01 05:25Distribution SiteLocky
www.end-motorsport.de
91.203.111.125 (- Germany)
2016-09-01 05:25Distribution SiteLocky
yhinas.hanagumori.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 05:25Distribution SiteLocky
www.redanchemical.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-01 05:25Distribution SiteLocky
roger.pierrieau.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 05:25Distribution SiteLocky
w07q93g5g.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:25Distribution SiteLocky
www.ieslamerced.es
62.42.230.17 (- Spain)
2016-09-01 05:25Distribution SiteLocky
18vek.spb.ru
RU-CENTER-RU217.107.34.41 (- Russian Federation)
2016-09-01 05:24Distribution SiteLocky
nkbzryw.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-09-01 05:24Distribution SiteLocky
www.hotelancorariviera.com
REGISTER.IT SPA176.227.171.75 (- Italy)
2016-09-01 05:24Distribution SiteLocky
alc-okadakogyo.com
GMO INTERNET, INC. DBA ONAMAE.CO[...] (n/a)
2016-09-01 05:24Distribution SiteLocky
www.personalshoppingservice.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:24Distribution SiteLocky
a-tconsulting.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-09-01 05:06Payment SiteCerber
wjtqjleommc4z46i.m33d4b.bid
Eranet International Limited (n/a)
2016-09-01 05:03Distribution SiteLocky
www.drvandenbroeck.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-09-01 05:03Distribution SiteLocky
www.puntoit-informatica.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:03Distribution SiteLocky
hikodge.zashiki.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-01 05:03Distribution SiteLocky
specialist.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:03Distribution SiteLocky
www.Logopaedie-Tisch.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:03Distribution SiteLocky
www.bebrudy.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-09-01 05:03Distribution SiteLocky
rejoincomp2.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-01 05:03Distribution SiteLocky
web2.v45.ncsrv.de
89.110.144.59 (- Germany)
2016-09-01 05:02Distribution SiteLocky
www.gadtrento.it
TISCALIDOMAIN-REG62.149.128.45 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.europegreen.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.peterswebsite.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-09-01 05:02Distribution SiteLocky
cyfrowemotywy.cba.pl
Abc Hosting Ltd.37.48.70.196 (- Netherlands)
2016-09-01 05:02Distribution SiteLocky
212.26.129.68
n/a
2016-09-01 05:02Distribution SiteLocky
www.plastimonza.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:02Distribution SiteLocky
79.96.153.93
(n/a)
2016-09-01 05:02Payment SiteCerber
unocl45trpuoefft.j0cia7.bid
Eranet International Limited (n/a)
2016-09-01 05:02Distribution SiteLocky
www.mediawareonline.it
INIT-REG212.104.43.3 (- Italy)
2016-09-01 05:02Distribution SiteLocky
www.smoes.net
TUCOWS DOMAINS INC.213.136.75.57 (- Germany)
2016-09-01 05:02Distribution SiteLocky
kallait.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-09-01 05:02Payment SiteCerber
pmenboeqhyrpvomq.8kcfnk.bid
Eranet International Limited (n/a)
2016-09-01 05:01Payment SiteCerber
wjtqjleommc4z46i.whmykv.bid
Eranet International Limited (n/a)
2016-09-01 05:01Distribution SiteLocky
ventkanal.ru
REGISTRATOR-RU90.156.201.107 (- Russian Federation) +3 A record(s) 90.156.201.79 (AS25532, - Russian Federation)
90.156.201.89 (AS25532, - Russian Federation)
90.156.201.97 (AS25532, - Russian Federation)
2016-09-01 05:01Distribution SiteLocky
www.energetica.it
TISCALIDOMAIN-REG31.11.34.18 (- Italy)
2016-09-01 05:01Distribution SiteLocky
www.jramirez.com
NOMINALIA INTERNET S.L.151.80.196.96 (- France)
2016-09-01 05:01Distribution SiteLocky
www.sashraf.plus.com
ENOM, INC.212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-09-01 05:01Distribution SiteLocky
jago-computerservice.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:01Distribution SiteLocky
antopisanelli.interfree.it
REGISTER-REG80.91.55.51 (- Italy)
2016-09-01 05:01Distribution SiteLocky
impregui.com
10DENCEHISPAHARD, S.L217.160.0.32 (- Germany)
2016-09-01 05:01Distribution SiteLocky
gebetech.at
92.63.216.53 (- Austria)
2016-09-01 05:01Distribution SiteLocky
www.vincenzofranchino.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-01 05:01Distribution SiteLocky
amandinearmand.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-01 05:01Distribution SiteLocky
www.nadelaur.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]195.130.132.84 (- Belgium)
2016-09-01 05:01Distribution SiteLocky
www.shivartatoo.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:01Distribution SiteLocky
w92k6t3fp.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:01Distribution SiteLocky
sven-jaenecke.homepage.t-online.de
80.150.6.138 (- Germany)
2016-09-01 05:01Distribution SiteLocky
ihvr.org
Network Solutions, LLC (n/a)
2016-09-01 05:01Distribution SiteLocky
wishmaster.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-09-01 05:00Distribution SiteLocky
www.e-bev.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-01 05:00Distribution SiteLocky
abufarha.net
FASTDOMAIN, INC.208.91.199.21 (- United States)
2016-09-01 05:00Distribution SiteLocky
angeluna.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.134 (- United States)
2016-09-01 05:00Distribution SiteLocky
www.visionaero.com
NETWORK SOLUTIONS, LLC.64.71.34.45 (- United States)
2016-09-01 05:00Distribution SiteLocky
web529.can29.de
188.138.66.29 (- Germany)
2016-09-01 05:00Distribution SiteLocky
www.cardellaservices.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]80.88.87.170 (- Italy)
2016-09-01 05:00Distribution SiteLocky
ydona.ru
RU-CENTER-RU195.208.1.143 (- Russian Federation)
2016-09-01 05:00Distribution SiteLocky
clubofmalw.ws
Eranet International Limited173.230.130.175 (- United States)
2016-09-01 04:59Distribution SiteLocky
vinciunion.co.th
T.H.NIC Co., Ltd.104.27.130.232 (- United States) +1 A record(s) 104.27.131.232 (AS13335, - United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >