Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-27 12:48Distribution SiteLocky
www.adafor.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]31.11.34.23 (- Italy)
2016-07-27 12:48Distribution SiteLocky
hotstreams.ru
RU-CENTER-RU193.42.142.132 (- Russian Federation)
2016-07-27 12:48Distribution SiteLocky
www.wellness-com.de
91.213.21.61 (- Germany)
2016-07-27 12:47Distribution SiteLocky
btkdev.lgg.ru
R01-RU (n/a)
2016-07-27 12:47Distribution SiteLocky
fitnesclub.ru
REGISTRATOR-RU90.156.201.105 (- Russian Federation) +3 A record(s) 90.156.201.106 (AS25532, - Russian Federation)
90.156.201.12 (AS25532, - Russian Federation)
90.156.201.56 (AS25532, - Russian Federation)
2016-07-27 12:47Distribution SiteLocky
www.frosinonewesternshow.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-27 12:47Distribution SiteLocky
www.prometsrl.org
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-07-27 12:47Distribution SiteLocky
bolloevcenter.ru
RU-CENTER-RU81.177.140.171 (- Russian Federation)
2016-07-27 12:47Distribution SiteLocky
snetwork.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.136 (- United States)
2016-07-27 12:47Distribution SiteLocky
hdjung.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:47Distribution SiteLocky
www.compland.ee
Zone Media OÜ212.7.7.85 (- Estonia)
2016-07-27 12:47Distribution SiteLocky
enlas.50webs.com
GODADDY.COM, LLC162.210.101.88 (- United States)
2016-07-27 12:47Distribution SiteLocky
oavb.com
TUCOWS DOMAINS INC.23.236.62.147 (- United States)
2016-07-27 12:47Distribution SiteLocky
dub3tv.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-07-27 12:47Distribution SiteLocky
mbctrans.3x.ro
ICI - ROTLD89.42.39.160 (- Romania)
2016-07-27 12:47Distribution SiteLocky
hoosiernetwork.com
ENOM, INC.23.20.239.12 (- United States)
2016-07-27 12:47Distribution SiteLocky
btgnj.com
ENOM, INC.173.225.21.34 (- United States)
2016-07-27 12:47Distribution SiteLocky
zarabotaina.yomu.ru
REGTIME-RU91.223.216.67 (- Ukraine)
2016-07-27 12:47Distribution SiteLocky
karinschacht.addr.com
DOMAIN.COM, LLC18.218.10.100 (- United States)
2016-07-27 12:46Distribution SiteLocky
takemaruko.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.41 (- United States)
2016-07-27 12:46Distribution SiteLocky
modband.com
GODADDY.COM, LLC103.224.182.244 (- Australia)
2016-07-27 12:46Distribution SiteLocky
www.tipografiacouto.pt
81.88.57.70 (- Italy)
2016-07-27 12:46Distribution SiteLocky
baer-afc2.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 12:46Distribution SiteLocky
btkdevelopment.ru
RU-CENTER-RU81.177.139.242 (- Russian Federation)
2016-07-27 12:46Distribution SiteLocky
olgastudio.ro
Romarg SRL (n/a)
2016-07-27 11:32Payment SiteCerber
52uo5k3t73ypjije.dd4xo3.top
Eranet International Limited (n/a)
2016-07-27 11:25Payment SiteCerber
52uo5k3t73ypjije.omrexj.top
Alpnames Limited (n/a)
2016-07-27 10:26Payment SiteCerber
unocl45trpuoefft.9lnito.top
Eranet International Limited (n/a)
2016-07-27 10:22Payment SiteCerber
pmenboeqhyrpvomq.2agglf.top
Alpnames Limited (n/a)
2016-07-27 09:35Distribution SiteLocky
www.milleniumitaly.com
ENOM, INC.212.104.43.41 (- Italy)
2016-07-27 09:35Distribution SiteLocky
hobbyfraeser.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 09:35Distribution SiteLocky
dslandscape.50webs.com
GODADDY.COM, LLC162.210.101.20 (- United States)
2016-07-27 09:35Distribution SiteLocky
wac80v41f.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-27 09:35Distribution SiteLocky
gmp.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-27 09:35Distribution SiteLocky
italcase.ve.it
REGISTER-REG195.110.124.188 (- Italy)
2016-07-27 09:35Distribution SiteLocky
mendikurconsulting.com
DINAHOSTING SL82.98.160.111 (- Spain)
2016-07-27 09:35Distribution SiteLocky
www.holzrueckewagen.de
81.169.145.194 (- Germany)
2016-07-27 09:35Distribution SiteLocky
alldesu.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.16 (- United States)
2016-07-27 09:35Distribution SiteLocky
uladekoracje.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-07-27 09:35Distribution SiteLocky
yogamaruco.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-07-27 09:00Distribution SiteLocky
www.foto-aeree.it
TISCALIDOMAIN-REG81.29.220.209 (- Italy)
2016-07-27 09:00Distribution SiteLocky
mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)
2016-07-27 07:23Payment SiteCerber
52uo5k3t73ypjije.yw4629.top
Alpnames Limited (n/a)
2016-07-27 06:25Distribution SiteLocky
acnek.com
GODADDY.COM, LLC184.168.131.241 (- United States)
2016-07-27 06:25Distribution SiteLocky
dnp9.com
ENOM, INC.110.164.189.123 (- Thailand)
2016-07-27 06:25Distribution SiteLocky
scpremiumbikes.com
TUCOWS DOMAINS INC.103.6.198.237 (- Malaysia)
2016-07-27 06:25Distribution SiteLocky
sfabinc.com
WILD WEST DOMAINS, LLC40.114.93.130 (- United States)
2016-07-27 06:25Distribution SiteLocky
focolareostuni.it
WIDE-REG89.46.105.71 (- Italy)
2016-07-27 06:25Distribution SiteLocky
sturminvestigations.com
GODADDY.COM, LLC108.179.243.49 (- United States)
2016-07-27 06:25Distribution SiteLocky
cbactive.com
GODADDY.COM, LLC23.229.171.33 (- United States)
2016-07-27 06:25Distribution SiteLocky
calcoastlogistics.com
GODADDY.COM, LLC50.63.202.40 (- United States)
2016-07-27 06:24Distribution SiteLocky
ipfnamur.be
OVH213.186.33.19 (- France)
2016-07-27 06:24Distribution SiteLocky
all-rides.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-07-27 06:24Distribution SiteLocky
provincialpw.com
GODADDY.COM, LLC160.153.54.35 (- United States)
2016-07-27 06:24Distribution SiteLocky
davisdoherty.co.nz
119.47.117.112 (- New Zealand)
2016-07-27 06:24Distribution SiteLocky
uas-aas.ca
Tucows.com Co. (n/a)
2016-07-27 06:24Distribution SiteLocky
sitkainvestigations.com
GODADDY.COM, LLC184.168.221.58 (- United States)
2016-07-27 06:24Distribution SiteLocky
dugganinternational.ca
Promo People Inc.151.139.243.1 (- United States)
2016-07-27 06:24Distribution SiteLocky
versus.uz
BILLUR COM62.209.128.113 (- Uzbekistan)
2016-07-27 06:24Distribution SiteLocky
ahatv.com.au
Web Address Registration103.226.221.161 (- Australia)
2016-07-27 06:24Distribution SiteLocky
anima-centrum.sk
80.94.52.72 (- Slovakia)
2016-07-27 06:24Distribution SiteLocky
alinmaagroup.com
GODADDY.COM, LLC (n/a)
2016-07-27 06:24Distribution SiteLocky
albany.asn.au
Web Address Registration202.59.111.126 (- Australia)
2016-07-27 06:24Distribution SiteLocky
cinerd.info
GoDaddy.com, LLC (n/a)
2016-07-27 06:24Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-07-27 06:24Distribution SiteLocky
uitindrachten.nl
Mihosnet109.237.208.32 (- Netherlands)
2016-07-27 06:23Distribution SiteLocky
cm-seia.pt
94.46.167.10 (- Portugal)
2016-07-27 06:23Distribution SiteLocky
aquatixbottle.com
GODADDY.COM, LLC184.168.221.48 (- United States)
2016-07-27 06:23Distribution SiteLocky
altadevelopers.com
GODADDY.COM, LLC50.87.248.232 (- United States)
2016-07-27 06:23Distribution SiteLocky
colleenthestylist.com
GODADDY.COM, LLC184.168.221.9 (- United States)
2016-07-27 06:23Distribution SiteLocky
vidonet.es
217.160.128.205 (- Germany)
2016-07-27 06:23Distribution SiteLocky
ecpi.ro
Romarg SRL89.42.223.64 (- Romania)
2016-07-27 06:23Distribution SiteLocky
genius-versand.de
85.13.140.200 (- Germany)
2016-07-27 06:23Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM204.145.69.195 (- United States)
2016-07-27 06:23Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC64.32.8.69 (- United States)
2016-07-27 06:23Distribution SiteLocky
edilperle.it
WIDE-REG (n/a)
2016-07-27 06:23Distribution SiteLocky
equalityindonesia.com
CV. JOGJACAMP202.52.147.113 (- Indonesia)
2016-07-27 06:23Distribution SiteLocky
pasadenaoffice.com
REGISTER.COM, INC. (n/a)
2016-07-27 06:23Distribution SiteLocky
sichenia.omniadvert.it
ARUBA-REG (n/a)
2016-07-27 06:23Distribution SiteLocky
seroca.com
TECNOCRATICA CENTRO DE DATOS, S.[...]46.226.47.21 (- Spain)
2016-07-27 06:23Distribution SiteLocky
banthaoduoc.com
MAT BAO TRADING & SERVICE COMPAN[...]125.253.113.122 (- Vietnam)
2016-07-27 06:22Distribution SiteLocky
econopaginas.com
NEUBOX INTERNET SA DE CV162.144.21.152 (- United States)
2016-07-27 06:22Distribution SiteLocky
s2mgmt.com
GODADDY.COM, LLC23.236.62.147 (- United States)
2016-07-27 06:22Distribution SiteLocky
deanstum.com
GODADDY.COM, LLC23.89.15.97 (- United States)
2016-07-27 06:22Distribution SiteLocky
travoxsb.com
TUCOWS DOMAINS INC.110.4.45.235 (- Malaysia)
2016-07-27 06:22Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-07-27 06:22Distribution SiteLocky
hate-metal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.9.13.83 (- Germany)
2016-07-27 00:51Payment SiteCerber
52uo5k3t73ypjije.k9z7pm.top
Alpnames Limited (n/a)
2016-07-26 22:27Payment SiteCerber
52uo5k3t73ypjije.daigy0.top
Alpnames Limited (n/a)
2016-07-26 20:34Payment SiteCerber
52uo5k3t73ypjije.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 20:20Payment SiteCerber
unocl45trpuoefft.jjogbj.top
Eranet International Limited (n/a)
2016-07-26 19:10Payment SiteCerber
4kqd3hmqgptupi3p.dd4xo3.top
Eranet International Limited (n/a)
2016-07-26 19:05Payment SiteCerber
4kqd3hmqgptupi3p.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 17:22Payment SiteCerber
unocl45trpuoefft.kml2o2.top
Eranet International Limited (n/a)
2016-07-26 13:58Distribution SiteLocky
www.trapallan.com
10DENCEHISPAHARD, S.L134.0.11.62 (- Spain)
2016-07-26 13:58Distribution SiteLocky
gautyon.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.42 (- United States)
2016-07-26 13:58Distribution SiteLocky
marionawe.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 13:58Distribution SiteLocky
joseptarradellas38.com
10DENCEHISPAHARD, S.L (n/a)
2016-07-26 13:58Distribution SiteLocky
www.tinayr.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-26 13:58Distribution SiteLocky
nichudousoukai.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.134 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >