Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-29 12:10Distribution SiteLocky
garo903.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-07-29 12:10Distribution SiteLocky
www.fotosdelburgo.com
NORDNET62.37.237.62 (- Spain)
2016-07-29 12:10Distribution SiteLocky
smc.psuti.ru
NAUNET-RU94.25.37.27 (- Russian Federation)
2016-07-29 12:10Distribution SiteLocky
www.snvl-ptrc.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-29 12:10Distribution SiteLocky
www.13one.de
81.91.170.22 (- Germany)
2016-07-29 12:10Distribution SiteLocky
amandinearmand.perso.sfr.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-07-29 12:10Distribution SiteLocky
wn420pjpa.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-29 12:10Distribution SiteLocky
voisin-sa.com
ELB GROUP, INC.91.191.158.152 (- France)
2016-07-29 12:09Distribution SiteLocky
wktkwkbaaan.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.136 (- United States)
2016-07-29 12:09Distribution SiteLocky
hw.srca.org
GoDaddy.com, LLC192.186.224.37 (- United States)
2016-07-29 12:09Distribution SiteLocky
chelmy.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-29 12:09Distribution SiteLocky
bartocha-photography.com
CRONON AG85.214.46.80 (- Germany)
2016-07-29 12:09Distribution SiteLocky
www.hydroenergie.fr
OVH213.186.33.87 (- France)
2016-07-29 12:09Distribution SiteLocky
www.frank-nickel.de
185.53.179.8 (- Germany)
2016-07-29 11:09Payment SiteCerber
unocl45trpuoefft.y721yz.top
Eranet International Limited (n/a)
2016-07-29 10:52Distribution SiteLocky
www.ecologica2000srl.eu
Ascio Technologies Inc.213.205.40.169 (- Italy)
2016-07-29 10:52Distribution SiteLocky
kimani.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-07-29 10:52Distribution SiteLocky
melzer-ferienwohnung.de
(n/a)
2016-07-29 10:52Distribution SiteLocky
guessen.privat.t-online.de
80.150.6.138 (- Germany)
2016-07-29 10:52Distribution SiteLocky
www.diegofabbri.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-29 10:51Distribution SiteLocky
rhodins.nu
WorldNames, Inc (n/a)
2016-07-29 10:51Distribution SiteLocky
www.arrietayasociados.es
62.42.230.17 (- Spain)
2016-07-29 10:51Distribution SiteLocky
64.22.100.95
n/a
2016-07-29 10:51Distribution SiteLocky
www.corama.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]89.46.107.17 (- Italy)
2016-07-29 10:51Distribution SiteLocky
sandalcraft.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-29 10:51Distribution SiteLocky
www.amelander.nl
D-Hosting81.18.172.50 (- Netherlands)
2016-07-29 10:51Distribution SiteLocky
www.atiyka.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-29 10:51Distribution SiteLocky
www.cs-strumentazione.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-29 10:51Distribution SiteLocky
cieslakwz.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-29 10:51Distribution SiteLocky
kathrin18.edv-kamue.de
(n/a)
2016-07-29 10:51Distribution SiteLocky
www.professionaldga.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-29 10:51Distribution SiteLocky
www.markomielentz.de
(n/a)
2016-07-29 10:50Distribution SiteLocky
am-i-evil.de
(n/a)
2016-07-29 10:50Distribution SiteLocky
www.bobp.org.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.160 (- United Kingdom) +1 A record(s) 212.159.9.160 (AS6871, - United Kingdom)
2016-07-29 10:50Distribution SiteLocky
www.cabana.it
TISCALIDOMAIN-REG213.205.38.39 (- Italy)
2016-07-29 10:50Distribution SiteLocky
sspbadecz.ugu.pl
OVH SAS178.33.49.137 (- Poland)
2016-07-29 10:50Distribution SiteLocky
www.destine.broker.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-29 10:50Distribution SiteLocky
www.malzi.mynetcologne.de
81.173.246.8 (- Germany)
2016-07-29 10:50Distribution SiteLocky
hokkatsu6.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-07-29 10:50Distribution SiteLocky
www.josegbueno.jazztel.es
62.14.3.195 (- Spain)
2016-07-29 10:50Distribution SiteLocky
gurannbania03.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-07-29 10:49Distribution SiteLocky
www.oliooddo.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-07-29 10:49Distribution SiteLocky
shinryu1226.web.fc2.com
INSTRA CORPORATION PTY, LTD. (n/a)
2016-07-29 10:49Distribution SiteLocky
www.flamarimports.com.br
187.45.240.68 (- Brazil)
2016-07-29 10:49Distribution SiteLocky
www.finnform.it
REGISTER-REG (n/a)
2016-07-29 10:49Distribution SiteLocky
www.suesswarentechniker.de
81.169.145.223 (- Germany)
2016-07-29 10:49Distribution SiteLocky
kapiti-alpaca.co.nz
198.23.52.98 (- United States)
2016-07-29 10:49Distribution SiteLocky
www.nieli.de
81.169.145.226 (- Germany)
2016-07-29 10:49Distribution SiteLocky
pixelacker.de
(n/a)
2016-07-29 10:49Distribution SiteLocky
www.techninov.fr
OVH213.186.33.24 (- France)
2016-07-29 10:49Distribution SiteLocky
gim24.y0.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-29 08:43Distribution SiteLocky
newsgolf.50webs.com
GODADDY.COM, LLC162.210.101.106 (- United States)
2016-07-29 08:43Distribution SiteLocky
wieselflinkpro.gmxhome.de
82.165.58.15 (- Germany)
2016-07-29 08:43Distribution SiteLocky
krohe-dienstleistungen.de
80.150.6.143 (- Germany)
2016-07-29 08:43Distribution SiteLocky
www.offroadhandel.de
81.169.145.223 (- Germany)
2016-07-29 08:43Distribution SiteLocky
www.europegreen.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-07-29 08:43Distribution SiteLocky
www.instalacionesjosearteaga.com
NOMINALIA INTERNET S.L.104.27.174.35 (- United States) +1 A record(s) 104.27.175.35 (AS13335, - United States)
2016-07-29 08:43Distribution SiteLocky
lokin.grafi-offshore.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]35.204.116.33 (- United States)
2016-07-29 08:42Distribution SiteLocky
www.italius.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]52.58.78.16 (- Germany)
2016-07-29 08:42Distribution SiteLocky
529265.swh.strato-hosting.eu
STRATO AG81.169.145.153 (- Germany)
2016-07-29 08:42Distribution SiteLocky
smart.tin.it
TIN-REG62.211.65.25 (- Italy)
2016-07-29 08:42Distribution SiteLocky
used-audi-car-for-sale.co.uk
COLCATWEB Limited t/a UK-Cheapes[...] (n/a)
2016-07-29 08:42Distribution SiteLocky
www.dan-dumitrache.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-29 08:42Distribution SiteLocky
www.meta.metro.ru
RU-CENTER-RU195.91.160.34 (- Russian Federation)
2016-07-29 08:42Distribution SiteLocky
robbeottoy.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-07-29 08:42Distribution SiteLocky
66.147.244.210
n/a
2016-07-29 08:42Distribution SiteLocky
medilink.fr
GANDI23.236.62.147 (- United States)
2016-07-29 08:42Distribution SiteLocky
www.recuperifallimentari.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-29 08:42Distribution SiteLocky
www.finkeyhangszer.hu
(n/a)
2016-07-29 08:42Distribution SiteLocky
sobczuk.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-29 08:42Distribution SiteLocky
vupegrafika.hu
195.228.152.174 (- Hungary)
2016-07-29 08:42Distribution SiteLocky
sabplatform.com
GODADDY.COM, LLC107.180.25.1 (- United States)
2016-07-29 08:42Distribution SiteLocky
www.studiolegalecarlopuddu.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]82.85.27.144 (- Italy)
2016-07-29 08:42Distribution SiteLocky
www.lartsev.com
ENOM, INC.212.7.7.85 (- Estonia)
2016-07-29 04:52Distribution SiteLocky
studiobbou.com
1&1 INTERNET SE92.222.7.85 (- France)
2016-07-29 04:52Distribution SiteLocky
familieewald.de
(n/a)
2016-07-29 04:52Distribution SiteLocky
leska-test.angelfire.com
CSC CORPORATE DOMAINS, INC.209.202.252.41 (- United States)
2016-07-29 04:52Distribution SiteLocky
111.86.142.67
n/a
2016-07-29 04:52Distribution SiteLocky
www.guapaweb.jazztel.es
62.14.3.195 (- Spain)
2016-07-29 04:52Distribution SiteLocky
www.itoigawanavi-www.com
JAPAN REGISTRY SERVICES CO., LTD[...]60.43.63.90 (- Japan)
2016-07-29 04:52Distribution SiteLocky
www.offroadhandel.de
81.169.145.223 (- Germany)
2016-07-29 04:52Distribution SiteLocky
www.landscape.hu
(n/a)
2016-07-29 04:52Distribution SiteLocky
www.landscape.hu
(n/a)
2016-07-29 04:52Distribution SiteLocky
carelife.koborezakura.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-29 04:52Distribution SiteLocky
www.hotelnidodaquila.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-29 04:51Distribution SiteLocky
www.finkeyhangszer.hu
(n/a)
2016-07-29 04:51Distribution SiteLocky
adsnight.com
GODADDY.COM, LLC166.62.10.52 (- United States)
2016-07-29 04:51Distribution SiteLocky
termstal.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-29 04:15Payment SiteCerber
4kqd3hmqgptupi3p.v11z5e.top
Alpnames Limited (n/a)
2016-07-28 22:14Payment SiteCerber
27lelchgcvs2wpm7.nfgpeb.top
Eranet International Limited (n/a)
2016-07-28 18:29Payment SiteCerber
pmenboeqhyrpvomq.y5j7e6.top
Eranet International Limited (n/a)
2016-07-28 15:24Payment SiteCerber
unocl45trpuoefft.kswcuk.top
Eranet International Limited (n/a)
2016-07-28 14:44Payment SiteCerber
unocl45trpuoefft.31wkhu.top
Eranet International Limited (n/a)
2016-07-28 13:47Botnet C&CLocky
urulvtffwoq.xyz
Gandi SAS91.226.92.202 (- Russian Federation)
2016-07-28 13:20Distribution SiteLocky
whvf2gm5n.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 13:20Distribution SiteLocky
gnetgnethouse.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-07-28 13:20Distribution SiteLocky
schefman.info
Key-Systems GmbH185.56.145.137 (- Netherlands)
2016-07-28 13:20Distribution SiteLocky
www.sgspeziapallamano.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-28 13:20Distribution SiteLocky
aminghausen.com
KEY-SYSTEMS GMBH176.9.189.26 (- Germany)
2016-07-28 12:25Botnet C&CLocky
193.124.180.6
193.124.180.6 (- Russian Federation)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >