Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-25 12:14Botnet C&CLocky
fqoapcjolfwwenqx.pw
Registrar of Domain Names REG.RU[...]91.226.92.208 (- Russian Federation)
2016-08-25 12:14Botnet C&CLocky
51.254.55.171
51.254.55.171 (- France)
2016-08-25 12:14Distribution SiteLocky
csegurosural.com
DINAHOSTING SL82.98.160.76 (- Spain)
2016-08-25 12:14Distribution SiteLocky
df2lh.privat.t-online.de
80.150.6.138 (- Germany)
2016-08-25 12:13Distribution SiteLocky
www.leprimodels.it
TISCALIDOMAIN-REG31.11.34.87 (- Italy)
2016-08-25 12:13Distribution SiteLocky
gerhard-schudok.de
(n/a)
2016-08-25 12:13Distribution SiteLocky
pvdbosch.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-08-25 12:12Distribution SiteLocky
moussayer.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-08-25 10:52Payment SiteCerber
52uo5k3t73ypjije.ij0cia.bid
Eranet International Limited (n/a)
2016-08-25 09:50Payment SiteCerber
52uo5k3t73ypjije.insystem.men
Alpnames Limited (n/a)
2016-08-25 08:25Distribution SiteLocky
www.sp-moto.ru
REGTIME-RU (n/a)
2016-08-25 08:25Distribution SiteLocky
www.kuldkaru.ee
Zone Media OÜ212.7.7.85 (- Estonia)
2016-08-25 08:25Distribution SiteLocky
lima-acoustics.com
MESH DIGITAL LIMITED83.169.41.57 (- Germany)
2016-08-25 08:25Distribution SiteLocky
blossom0012.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-08-25 08:25Distribution SiteLocky
bluepierrotnodanoni.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-08-25 08:25Distribution SiteLocky
www.mbeccarini.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.24.124.99 (- United States) +1 A record(s) 104.24.125.99 (AS13335, - United States)
2016-08-25 08:24Distribution SiteLocky
www.macro1990.it
TISCALIDOMAIN-REG89.40.173.228 (- Italy)
2016-08-25 08:24Distribution SiteLocky
da-fortunato.de
(n/a)
2016-08-25 08:24Distribution SiteLocky
wgg985gsd.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-25 08:24Distribution SiteLocky
www.geocities.jp
182.22.6.222 (- Japan) +2 A record(s) 182.22.6.224 (AS23816, - Japan)
182.22.6.232 (AS23816, - Japan)
2016-08-25 08:24Distribution SiteLocky
spichki.in.ua
185.67.1.94 (- Ukraine)
2016-08-25 08:24Distribution SiteLocky
diskobil.dk
94.231.109.70 (- Denmark)
2016-08-25 08:23Distribution SiteLocky
www.leuchten-modelle.de
81.169.145.161 (- Germany)
2016-08-25 08:23Distribution SiteLocky
www.bebrudy.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-08-25 08:23Distribution SiteLocky
antopisanelli.interfree.it
REGISTER-REG80.91.55.51 (- Italy)
2016-08-25 08:23Distribution SiteLocky
www.panetteriagiacosa.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-25 08:22Distribution SiteLocky
202.210.189.111
n/a
2016-08-25 08:22Distribution SiteLocky
www.comunedipratiglione.it
TISCALIDOMAIN-REG (n/a)
2016-08-25 08:22Distribution SiteLocky
download.apf.asso.fr
EDICIEL95.81.131.86 (- France)
2016-08-25 08:21Distribution SiteLocky
www.gadtrento.it
TISCALIDOMAIN-REG62.149.128.45 (- Italy)
2016-08-25 08:21Distribution SiteLocky
kikital.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-08-25 08:21Distribution SiteLocky
tisystems.cz
REG-ZONER77.48.30.93 (- Czech Republic)
2016-08-25 08:21Distribution SiteLocky
ihvr.org
Network Solutions, LLC (n/a)
2016-08-25 08:20Distribution SiteLocky
spir.50webs.com
GODADDY.COM, LLC162.210.101.101 (- United States)
2016-08-25 08:20Distribution SiteLocky
www.cardellaservices.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]80.88.87.170 (- Italy)
2016-08-25 08:20Distribution SiteLocky
www.stefanopennacchiottigioielleria.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-25 08:20Distribution SiteLocky
cbactive.com
GODADDY.COM, LLC23.229.171.33 (- United States)
2016-08-25 08:20Distribution SiteLocky
www.Logopaedie-Tisch.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-25 08:19Distribution SiteLocky
www.rettificabellani.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]89.46.108.44 (- Italy)
2016-08-25 08:19Distribution SiteLocky
www.arrotin.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-08-25 08:19Distribution SiteLocky
217.172.226.2
n/a
2016-08-25 08:19Distribution SiteLocky
eb3jt.ure.es
217.182.223.39 (- France)
2016-08-25 08:19Distribution SiteLocky
www.profa.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-25 08:19Distribution SiteLocky
rejoincomp2.in
Endurance Domains Technology Pvt[...] (n/a)
2016-08-25 08:18Distribution SiteLocky
dongguklee.wo.to
114.108.131.111 (- Korea)
2016-08-25 08:18Distribution SiteLocky
yourimagination.angelcities.com
TUCOWS DOMAINS INC.66.219.202.10 (- United States)
2016-08-25 08:18Distribution SiteLocky
sfiso.50webs.com
GODADDY.COM, LLC162.210.101.100 (- United States)
2016-08-25 08:18Distribution SiteLocky
brunnenburg.de
(n/a)
2016-08-25 08:18Distribution SiteLocky
www.vogelsang-net.de
81.169.145.226 (- Germany)
2016-08-25 07:41Payment SiteCerber
52uo5k3t73ypjije.yg767p.bid
Eranet International Limited (n/a)
2016-08-24 23:30Payment SiteCerber
unocl45trpuoefft.thanreal.link
Alpnames Limited (n/a)
2016-08-24 17:29Payment SiteCerber
4kqd3hmqgptupi3p.insystem.men
Alpnames Limited (n/a)
2016-08-24 11:51Payment SiteCerber
52uo5k3t73ypjije.dvuybv.bid
Eranet International Limited (n/a)
2016-08-24 09:50Payment SiteCerber
52uo5k3t73ypjije.whosewine.lol
Alpnames Limited (n/a)
2016-08-23 14:07Payment SiteCerber
unocl45trpuoefft.zdamew.bid
Eranet International Limited (n/a)
2016-08-23 12:41Distribution SiteLocky
platimunjinoz.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-23 12:40Distribution SiteLocky
clickme22.wang
Todaynic com Inc (n/a)
2016-08-23 12:39Distribution SiteLocky
jbrktqnxklmuf.info
Gandi SAS104.27.173.113 (- United States)
2016-08-23 12:39Distribution SiteLocky
escapegasmech.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-08-23 12:38Distribution SiteLocky
mhrbuvcvhjakbisd.xyz
Gandi SAS (n/a)
2016-08-23 12:38Distribution SiteLocky
vittuperkele.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-08-23 12:37Distribution SiteLocky
harrypotternotawizard.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-08-23 09:06Distribution SiteLocky
www.wellness-com.de
91.213.21.61 (- Germany)
2016-08-23 09:05Distribution SiteLocky
www.stucchifedele.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-08-23 09:05Distribution SiteLocky
www.gioilda.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-23 09:05Distribution SiteLocky
alinmaagroup.com
GODADDY.COM, LLC (n/a)
2016-08-23 09:05Distribution SiteLocky
albany.asn.au
Web Address Registration202.59.111.126 (- Australia)
2016-08-23 09:04Distribution SiteLocky
klausschuster.at
81.19.145.66 (- Austria)
2016-08-23 09:04Distribution SiteLocky
delaemvkusnoe.ru
RU-CENTER-RU (n/a)
2016-08-23 09:04Distribution SiteLocky
www.dsalchi.org
eNom, Inc. (n/a)
2016-08-23 09:04Distribution SiteLocky
sitkainvestigations.com
GODADDY.COM, LLC50.63.202.47 (- United States)
2016-08-23 09:04Distribution SiteLocky
vilalusa.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]72.52.4.119 (- United States)
2016-08-23 09:03Distribution SiteLocky
hdajaeger.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-23 09:03Distribution SiteLocky
breinco.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]46.183.116.203 (- Spain)
2016-08-23 09:03Distribution SiteLocky
www.kardborren.se
Loopia AB91.189.41.173 (- Sweden)
2016-08-23 09:02Distribution SiteLocky
popcom.be
PopCom NV52.57.25.205 (- Germany)
2016-08-23 09:02Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC46.166.182.110 (- Netherlands)
2016-08-23 09:02Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM204.145.69.195 (- United States)
2016-08-23 09:02Distribution SiteLocky
gebetech.at
92.63.216.53 (- Austria)
2016-08-23 09:01Distribution SiteLocky
go4leiner.de
(n/a)
2016-08-23 09:01Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-08-23 09:01Distribution SiteLocky
vittuperkele.top
Eranet International Limited (n/a)
2016-08-23 09:00Distribution SiteLocky
direttaauto.com
TUCOWS DOMAINS INC.208.91.197.160 (- Virgin Islands)
2016-08-23 09:00Distribution SiteLocky
hdjung.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-23 05:14Payment SiteCerber
52uo5k3t73ypjije.dsv023.bid
Eranet International Limited (n/a)
2016-08-23 04:19Payment SiteCerber
52uo5k3t73ypjije.lethints.date
Alpnames Limited (n/a)
2016-08-23 03:03Payment SiteCerber
52uo5k3t73ypjije.p5dxeh.bid
Eranet International Limited (n/a)
2016-08-22 16:28Distribution SiteLocky
whienz.privat.t-online.de
80.150.6.138 (- Germany)
2016-08-22 16:28Distribution SiteLocky
koksi.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-22 16:28Distribution SiteLocky
spiritcity.us
GODADDY.COM, INC.66.135.58.20 (- United States)
2016-08-22 16:28Distribution SiteLocky
akasylberlin.de
188.40.179.193 (- Germany)
2016-08-22 16:27Distribution SiteLocky
www.terlizzigasimpianti.it
TISCALIDOMAIN-REG (n/a)
2016-08-22 16:27Distribution SiteLocky
www.comefri.es
176.28.103.205 (- Spain)
2016-08-22 16:27Distribution SiteLocky
www.mhc-stables.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-08-22 16:27Distribution SiteLocky
moriyamaseikotuin.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-08-22 16:27Distribution SiteLocky
jandoerrenhaus.de
89.31.143.1 (- Germany)
2016-08-22 16:26Distribution SiteLocky
atelierprincesse.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.42 (- United States)
2016-08-22 16:26Distribution SiteLocky
aide-villages-togo.fr
OVH213.186.33.24 (- France)
2016-08-22 16:26Distribution SiteLocky
www.makarm.plus.com
ENOM, INC. (n/a)
2016-08-22 16:26Distribution SiteLocky
luckyanja.50webs.com
GODADDY.COM, LLC198.23.52.100 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >