Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-08-18 12:01Distribution SiteLocky
infocoard.50webs.com
GODADDY.COM, LLC162.210.101.85 (- United States)
2016-08-18 12:01Distribution SiteLocky
www.lechner-maria.de
(n/a)
2016-08-18 12:01Distribution SiteLocky
www.pulsefl.0catch.com
FASTDOMAIN, INC.66.219.202.10 (- United States)
2016-08-18 12:01Distribution SiteLocky
www.unice.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-18 12:01Distribution SiteLocky
www.alexpalmieri.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-18 12:01Distribution SiteLocky
zsp17.y0.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-08-18 12:01Distribution SiteLocky
dasproject.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-18 12:01Distribution SiteLocky
hanakago3.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-08-18 12:01Distribution SiteLocky
mortony.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-18 12:00Distribution SiteLocky
www.1-anwalt.de
81.169.145.194 (- Germany)
2016-08-18 12:00Distribution SiteLocky
www.bkcelje.50webs.com
GODADDY.COM, LLC (n/a)
2016-08-18 12:00Distribution SiteLocky
www.kdr.easynet.co.uk
Nexinto GmbH t/a Nexinto GmbH (n/a)
2016-08-18 12:00Distribution SiteLocky
www.learnetplus.org
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-08-18 12:00Distribution SiteLocky
www.pizzeriaelite.it
TISCALIDOMAIN-REG (n/a)
2016-08-18 12:00Distribution SiteLocky
a-plusrijopleiding.nl
Registrar.eu62.129.139.129 (- Netherlands)
2016-08-18 12:00Distribution SiteLocky
cs-czosnusie.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-18 12:00Distribution SiteLocky
rgcgifuhashima.aikotoba.jp
112.140.42.29 (- Japan)
2016-08-18 12:00Distribution SiteLocky
www.beneli.be
Telenet BVBA5.196.134.168 (- France)
2016-08-18 12:00Distribution SiteLocky
www.fabriziorossi.it
TISCALIDOMAIN-REG31.11.34.35 (- Italy)
2016-08-18 12:00Distribution SiteLocky
ramenman.okoshi-yasu.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-18 12:00Distribution SiteLocky
cloud9surfphilippines.com
IN2NET NETWORK, INC. (n/a)
2016-08-18 11:59Distribution SiteLocky
www.jphmvossen.nl
Tele2 zakelijk217.149.192.84 (- Netherlands)
2016-08-18 11:59Distribution SiteLocky
www.parma-vivai.it
TISCALIDOMAIN-REG195.110.124.148 (- Italy)
2016-08-18 11:59Distribution SiteLocky
entrematicomstyle.com
NETWORK SOLUTIONS, LLC. (n/a)
2016-08-18 02:33Botnet C&CLocky
qdvkdyvrtpjc.pw
Namecheap208.100.26.234 (- United States)
2016-08-18 01:39Payment SiteCerber
52uo5k3t73ypjije.b2s4ch.bid
Eranet International Limited (n/a)
2016-08-18 01:36Payment SiteCerber
52uo5k3t73ypjije.rv50gt.bid
Eranet International Limited (n/a)
2016-08-18 00:12Payment SiteCerber
52uo5k3t73ypjije.uwazu7.bid
Eranet International Limited (n/a)
2016-08-17 21:07Payment SiteCerber
52uo5k3t73ypjije.01fake.bid
Eranet International Limited (n/a)
2016-08-17 17:56Payment SiteCerber
52uo5k3t73ypjije.ei9evn.top
Alpnames Limited (n/a)
2016-08-17 13:30Distribution SiteLocky
www.athenaph.it
TISCALIDOMAIN-REG (n/a)
2016-08-17 13:29Distribution SiteLocky
www.soliferm.com
OVH213.186.33.24 (- France)
2016-08-17 13:28Distribution SiteLocky
www.irisgoetz.net
PSI-USA, INC. DBA DOMAIN ROBOT85.124.51.104 (- Austria)
2016-08-17 13:26Distribution SiteLocky
www.baune.be
OVH (n/a)
2016-08-17 13:01Distribution SiteLocky
www.spirality.it
TISCALIDOMAIN-REG213.205.38.46 (- Italy)
2016-08-17 13:00Distribution SiteLocky
allgaeu-papparatzi.de
80.237.133.218 (- Germany)
2016-08-17 12:58Distribution SiteLocky
sora1221.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.48 (- United States)
2016-08-17 12:36Distribution SiteLocky
cronininc.us
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-08-17 12:35Distribution SiteLocky
alynawebx.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-08-17 12:34Distribution SiteLocky
littleredcrane.50webs.com
GODADDY.COM, LLC162.210.101.109 (- United States)
2016-08-17 12:33Distribution SiteLocky
www.dog-portrait.com
NETWORK SOLUTIONS, LLC.213.205.40.169 (- Italy)
2016-08-17 12:30Distribution SiteLocky
rund-ums-haus-rosner.de
(n/a)
2016-08-17 12:30Distribution SiteLocky
dou43.rybadm.ru
RU-CENTER-RU185.57.237.33 (- Russian Federation)
2016-08-17 08:11Payment SiteCerber
4kqd3hmqgptupi3p.z8ijgn.bid
Eranet International Limited (n/a)
2016-08-17 07:50Payment SiteTorrentLocker
vrympoqs5ra34nfo.smartbus.at
(n/a)
2016-08-17 07:43Payment SiteTorrentLocker
vrympoqs5ra34nfo.bigbird.at
(n/a)
2016-08-17 05:40Payment SiteTorrentLocker
vrympoqs5ra34nfo.torhelper.pl
EPAG Domainservices GmbH (n/a)
2016-08-17 00:51Payment SiteCerber
52uo5k3t73ypjije.x7fylp.bid
Eranet International Limited (n/a)
2016-08-16 20:25Payment SiteCerber
unocl45trpuoefft.um1x6z.bid
Eranet International Limited (n/a)
2016-08-16 15:12Payment SiteCerber
unocl45trpuoefft.tcly4s.bid
Eranet International Limited (n/a)
2016-08-16 11:52Distribution SiteLocky
hoshiomi.yu-nagi.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-16 11:52Distribution SiteLocky
www.netman.plus.com
ENOM, INC.212.159.8.91 (- United Kingdom) +1 A record(s) 212.159.9.91 (AS6871, - United Kingdom)
2016-08-16 11:51Distribution SiteLocky
www.enola.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 11:47Distribution SiteLocky
www.gcs-crostolo.it
TISCALIDOMAIN-REG (n/a)
2016-08-16 11:47Distribution SiteLocky
www.greatidea.de
212.72.183.216 (- Germany)
2016-08-16 10:53Payment SiteCerber
52uo5k3t73ypjije.tzgwdf.top
Alpnames Limited (n/a)
2016-08-16 10:48Distribution SiteLocky
soma-holidays.co.uk
Fasthosts Internet Ltd78.47.142.219 (- Germany)
2016-08-16 10:48Distribution SiteLocky
gury.com.br
191.252.51.217 (- Brazil)
2016-08-16 10:48Distribution SiteLocky
depic.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-16 10:47Distribution SiteLocky
www.gran.mari-el.ru
RU-CENTER-RU77.40.0.4 (- Russian Federation)
2016-08-16 10:46Distribution SiteLocky
manutencao-de-celulares.com.br
187.45.195.14 (- Brazil)
2016-08-16 10:46Distribution SiteLocky
www.ferienhaus-mesa.at
77.244.243.38 (- Austria)
2016-08-16 10:46Distribution SiteLocky
www.enola.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 10:45Distribution SiteLocky
www.gianlucaboezio.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 10:45Distribution SiteLocky
fereastrazmeilor.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-08-16 10:45Distribution SiteLocky
www.heilen-und-entspannen.de
81.169.145.224 (- Germany)
2016-08-16 10:45Distribution SiteLocky
www.batsch-nass.de
(n/a)
2016-08-16 10:45Distribution SiteLocky
www.lefaos.50webs.com
GODADDY.COM, LLC (n/a)
2016-08-16 10:44Distribution SiteLocky
ermt.ikidane.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-08-16 10:44Distribution SiteLocky
www.concime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]69.172.201.153 (- United States)
2016-08-16 10:44Distribution SiteLocky
testtameshi2009.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.45 (- United States)
2016-08-16 10:43Distribution SiteLocky
franzi66.50webs.com
GODADDY.COM, LLC198.23.52.96 (- United States)
2016-08-16 10:43Distribution SiteLocky
zarexbytonia.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-08-16 10:43Distribution SiteLocky
www.mediatoponline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 10:42Distribution SiteLocky
videoakama.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-08-16 10:42Distribution SiteLocky
stage.diabetes.bayer.in
CSC Corporate Domains, Inc. (R63[...]192.206.64.126 (- United States)
2016-08-16 10:42Distribution SiteLocky
www.gcs-crostolo.it
TISCALIDOMAIN-REG (n/a)
2016-08-16 10:42Distribution SiteLocky
macdtoha.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.134 (- United States)
2016-08-16 10:41Distribution SiteLocky
www.olze.info
Cronon AG81.169.145.161 (- Germany)
2016-08-16 10:41Distribution SiteLocky
www.francescomalfatti.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-08-16 08:49Payment SiteCerber
wjtqjleommc4z46i.eag72x.top
Alpnames Limited (n/a)
2016-08-16 05:32Payment SiteCerber
unocl45trpuoefft.at593l.bid
Eranet International Limited (n/a)
2016-08-16 00:53Payment SiteCerber
4kqd3hmqgptupi3p.liescale.in
Webiq Domains Solutions Pvt. Ltd[...] (n/a)
2016-08-16 00:12Payment SiteCerber
pmenboeqhyrpvomq.enanhb.bid
Eranet International Limited (n/a)
2016-08-15 17:06Payment SiteCerber
52uo5k3t73ypjije.hbd7m4.bid
Eranet International Limited (n/a)
2016-08-15 16:29Payment SiteCerber
52uo5k3t73ypjije.ooulp2.bid
Eranet International Limited (n/a)
2016-08-15 13:46Distribution SiteLocky
www.chatleather.com
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-08-15 13:44Distribution SiteLocky
www.attivita-antroposofiche-roma.org
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-08-15 13:44Distribution SiteLocky
www.bruciati.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-08-15 13:43Distribution SiteLocky
www.dbv-winterthur.homepage.t-online.de
80.150.6.138 (- Germany)
2016-08-15 13:43Distribution SiteLocky
www.anticarredodolomiti.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-08-15 13:34Payment SiteCerber
unocl45trpuoefft.ye4f7k.bid
Eranet International Limited (n/a)
2016-08-15 13:20Payment SiteCerber
52uo5k3t73ypjije.vor28o.bid
Eranet International Limited (n/a)
2016-08-15 12:43Payment SiteCerber
unocl45trpuoefft.eloppu.bid
Eranet International Limited (n/a)
2016-08-15 12:41Payment SiteCerber
52uo5k3t73ypjije.zd3p2g.top
Alpnames Limited (n/a)
2016-08-15 12:13Payment SiteCerber
52uo5k3t73ypjije.z8ijgn.bid
Eranet International Limited (n/a)
2016-08-15 11:42Distribution SiteLocky
kittoyakudatu.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-08-15 11:42Distribution SiteLocky
www.tecnohellas.gr
46.4.57.70 (- Germany)
2016-08-15 11:41Distribution SiteLocky
topfireart.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]162.210.101.118 (- United States)
2016-08-15 11:41Distribution SiteLocky
rondoncompany.bake-neko.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >