Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-28 12:25Botnet C&CLocky
139.59.147.0
139.59.147.0 (- Germany)
2016-07-28 11:55Distribution SiteLocky
robertstefan.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-28 11:55Distribution SiteLocky
apachost.com
SYNERGY WHOLESALE PTY LTD123.51.125.152 (- Australia)
2016-07-28 11:54Distribution SiteLocky
sonomama.kan-be.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-28 11:54Distribution SiteLocky
sardain.fr
1&1 Internet SE (n/a)
2016-07-28 11:54Distribution SiteLocky
www.aspadeljaen.com
NOMINALIA INTERNET S.L. (n/a)
2016-07-28 11:54Distribution SiteLocky
levivanesch.nl
Internet Service Europe B.V.185.214.149.17 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
avon-beraterin-mank.de
(n/a)
2016-07-28 11:54Distribution SiteLocky
dawstaw.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
okhtinka.ru.hoster-ok.com
CSL COMPUTER SERVICE LANGENBACH [...]88.86.111.110 (- Czech Republic)
2016-07-28 11:54Distribution SiteLocky
www.camelu.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]23.20.239.12 (- United States)
2016-07-28 11:54Distribution SiteLocky
maka.ken-shin.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-28 11:54Distribution SiteLocky
gumka.strefa.pl
Grupa Interia.pl sp. z o.o. sp. [...]217.74.65.23 (- Poland)
2016-07-28 11:54Distribution SiteLocky
www.flagships.de
185.53.178.6 (- Germany)
2016-07-28 11:54Distribution SiteLocky
kreacjonizm.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-07-28 11:54Distribution SiteLocky
www.andyschwietzer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 11:54Distribution SiteLocky
cukiernia_izabela.republika.pl
213.180.141.189 (- Poland)
2016-07-28 11:29Distribution SiteLocky
m1ikumoumist.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.46 (- United States)
2016-07-28 11:29Distribution SiteLocky
www.guapaweb.jazztel.es
62.14.3.195 (- Spain)
2016-07-28 11:11Distribution SiteLocky
creartnet.com
OVH213.186.33.4 (- France)
2016-07-28 11:10Distribution SiteLocky
www.inari.net
TUCOWS DOMAINS INC.80.75.96.68 (- Finland)
2016-07-28 11:10Distribution SiteLocky
sv-r.ru
R01-RU81.177.139.241 (- Russian Federation)
2016-07-28 11:10Distribution SiteLocky
mbiurorachunkowe.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-28 11:10Distribution SiteLocky
www.rgtalp14.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-28 11:10Distribution SiteLocky
blanquerna.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-28 11:10Distribution SiteLocky
dev12.gammat.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-07-28 11:09Distribution SiteLocky
kbridge.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.48 (- United States)
2016-07-28 11:09Distribution SiteLocky
papamama.com.sg
WEB COMMERCE COMMUNICATIONS (S) [...]96.45.82.181 (- United States) +3 A record(s) 96.45.82.55 (AS58621, - United States)
96.45.83.19 (AS20013, - United States)
96.45.83.216 (AS16552, - United States)
2016-07-28 11:09Distribution SiteLocky
www.ruyssinck-demeyer.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-07-28 10:31Distribution SiteLocky
okhtinka.ru.hoster-ok.com
CSL COMPUTER SERVICE LANGENBACH [...]88.86.111.110 (- Czech Republic)
2016-07-28 10:31Distribution SiteLocky
burkersdorf.eu
Speedbone GmbH83.133.244.231 (- Germany)
2016-07-28 10:31Distribution SiteLocky
campustouren.de
88.80.192.142 (- Germany)
2016-07-28 10:31Distribution SiteLocky
exclusive-closet.com
GODADDY.COM, LLC192.186.250.7 (- United States)
2016-07-28 10:31Distribution SiteLocky
arabian-horse-highlights.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 10:31Distribution SiteLocky
83.235.64.44
n/a
2016-07-28 09:36Distribution SiteLocky
www.andyschwietzer.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 09:36Distribution SiteLocky
it4cio.servicos.ws
GoDaddy.com187.45.193.203 (- Brazil)
2016-07-28 09:36Distribution SiteLocky
christilipp.com
WORLD4YOU INTERNET SERVICES GMBH81.19.145.90 (- Austria)
2016-07-28 09:35Distribution SiteLocky
178.78.87.8
n/a
2016-07-28 09:35Distribution SiteLocky
baldwinhistory.portalstream.net
TUCOWS DOMAINS INC.64.33.128.71 (- United States)
2016-07-28 09:35Distribution SiteLocky
piggy.riffle.be
IOP bvba195.28.164.224 (- Belgium)
2016-07-28 09:35Distribution SiteLocky
yourparty.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-28 09:35Distribution SiteLocky
www.chantale.force9.co.uk
Plusnet Plc t/a Plusnet PLC212.159.8.90 (- United Kingdom) +1 A record(s) 212.159.9.90 (AS6871, - United Kingdom)
2016-07-28 09:35Distribution SiteLocky
www.schwarzer-baer-kastl.de
81.169.145.223 (- Germany)
2016-07-28 09:35Distribution SiteLocky
zckupila.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-28 09:35Distribution SiteLocky
www.marinoderosas.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.32 (- Italy)
2016-07-28 09:35Distribution SiteLocky
sav-krelingen.de
188.68.47.60 (- Germany)
2016-07-28 09:35Distribution SiteLocky
fremdesland.x.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.61 (- United States)
2016-07-28 09:35Distribution SiteLocky
gkxxx.x.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.171 (- United States)
2016-07-28 09:35Distribution SiteLocky
www.clefranceitalie.org
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-07-28 09:35Distribution SiteLocky
www.acheri.it
TISCALIDOMAIN-REG213.205.38.44 (- Italy)
2016-07-28 09:35Distribution SiteLocky
bajasae.grupos.usb.ve
159.90.60.215 (- Venezuela)
2016-07-28 09:35Distribution SiteLocky
slit.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-07-28 09:35Distribution SiteLocky
motorkote.org
eNom, Inc.212.7.7.85 (- Estonia)
2016-07-28 09:34Distribution SiteLocky
billy-hanjo.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-28 09:34Distribution SiteLocky
karumaengeki.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.43 (- United States)
2016-07-28 09:34Distribution SiteLocky
lacrima.ru
RU-CENTER-RU212.109.192.240 (- Russian Federation)
2016-07-28 09:34Distribution SiteLocky
www.kan-therm.ru
RU-CENTER-RU213.189.197.187 (- Russian Federation)
2016-07-28 09:34Distribution SiteLocky
robertstefan.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-28 09:34Distribution SiteLocky
01ad681.netsolhost.com
NETWORK SOLUTIONS, LLC.206.188.192.236 (- United States)
2016-07-28 09:34Distribution SiteLocky
www.uasm.de
81.169.145.224 (- Germany)
2016-07-28 09:34Distribution SiteLocky
www.panella.org
Ascio Technologies, Inc. Danmark[...]213.205.38.35 (- Italy)
2016-07-28 09:34Distribution SiteLocky
schefman.info
Key-Systems GmbH185.56.145.137 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
idd00dnu.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-28 09:34Distribution SiteLocky
jozefow.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-28 09:34Distribution SiteLocky
luzdevelas.es
158.255.7.135 (- Russian Federation)
2016-07-27 22:06Payment SiteCerber
4kqd3hmqgptupi3p.lorrydo.lol
Alpnames Limited (n/a)
2016-07-27 19:44Payment SiteCerber
unocl45trpuoefft.p4sr76.top
Eranet International Limited (n/a)
2016-07-27 15:46Payment SiteCerber
52uo5k3t73ypjije.gnee6i.top
Eranet International Limited (n/a)
2016-07-27 14:31Payment SiteCerber
unocl45trpuoefft.ahhc36.top
Alpnames Limited (n/a)
2016-07-27 13:11Botnet C&CLocky
bciuemfaapyf.biz
DYNADOT LLC69.195.129.70 (- United States)
2016-07-27 13:07Botnet C&CLocky
5.9.253.173
5.9.253.173 (- Germany)
2016-07-27 13:07Botnet C&CLocky
178.62.232.244
178.62.232.244 (- Netherlands)
2016-07-27 13:04Distribution SiteLocky
marmorkontor.de
85.88.8.15 (- Germany)
2016-07-27 13:04Distribution SiteLocky
www.hime101.com.tw
SEEDNET118.193.174.227 (- China)
2016-07-27 13:04Distribution SiteLocky
www.gr-lin.de
(n/a)
2016-07-27 13:04Distribution SiteLocky
www.bgrea.karoo.net
NETWORK SOLUTIONS, LLC.213.249.243.21 (- United Kingdom)
2016-07-27 12:49Distribution SiteLocky
www.dogsandtails.be
Telenet BVBA (n/a)
2016-07-27 12:49Distribution SiteLocky
217.64.197.138
n/a
2016-07-27 12:49Distribution SiteLocky
cmt.ro
Vodafone Romania SA (n/a)
2016-07-27 12:49Distribution SiteLocky
deangelis.co.uk
Hostway Limited66.232.131.10 (- United Kingdom)
2016-07-27 12:49Distribution SiteLocky
maruyoshipap.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.132 (- United States)
2016-07-27 12:49Distribution SiteLocky
www.leonardoveronesi.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-27 12:49Distribution SiteLocky
beauty-jasmine.ru
RU-CENTER-RU195.208.1.121 (- Russian Federation)
2016-07-27 12:49Distribution SiteLocky
dataprim.fr
OVH213.186.33.2 (- France)
2016-07-27 12:49Distribution SiteLocky
download.arpcc.ro
ICI - ROTLD89.44.124.8 (- Romania)
2016-07-27 12:49Distribution SiteLocky
www.tangoshow.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-27 12:49Distribution SiteLocky
s1prod-ams.ho.ua
91.228.146.12 (- Ukraine)
2016-07-27 12:49Distribution SiteLocky
jupp4u.de
87.106.85.19 (- Germany)
2016-07-27 12:49Distribution SiteLocky
marchandedidees.fr
LIGNE WEB SERVICES - LWS (n/a)
2016-07-27 12:49Distribution SiteLocky
erkenne-mich-selbst.de
94.23.162.9 (- Germany)
2016-07-27 12:48Distribution SiteLocky
www.svenkneipp.de
81.169.145.148 (- Germany)
2016-07-27 12:48Distribution SiteLocky
hdajaeger.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:48Distribution SiteLocky
ukrasnogomosta.ru
RU-CENTER-RU81.177.141.20 (- Russian Federation)
2016-07-27 12:48Distribution SiteLocky
testkondostone.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.42 (- United States)
2016-07-27 12:48Distribution SiteLocky
theworldforce.de
(n/a)
2016-07-27 12:48Distribution SiteLocky
francescoeillupo.magix.net
DNS NET INTERNET SERVICE GMBH195.214.216.139 (- Germany)
2016-07-27 12:48Distribution SiteLocky
98.131.20.17
(n/a)
2016-07-27 12:48Distribution SiteLocky
www.sjones.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-27 12:48Distribution SiteLocky
zarabotat.yomu.ru
REGTIME-RU91.223.216.67 (- Ukraine)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >