Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-26 12:46Distribution SiteLocky
alanakamine.com.br
108.179.193.133 (- United States)
2016-07-26 12:46Distribution SiteLocky
akva-sarat.nichost.ru
RU-CENTER-RU195.208.1.150 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
relive-clean.ru
REGISTRATOR-RU90.156.201.111 (- Russian Federation) +3 A record(s) 90.156.201.18 (AS25532, - Russian Federation)
90.156.201.47 (AS25532, - Russian Federation)
90.156.201.83 (AS25532, - Russian Federation)
2016-07-26 12:46Distribution SiteLocky
gp-logistics.ru
R01-RU77.222.40.38 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
anttention.tv
GODADDY.COM, LLC (n/a)
2016-07-26 12:46Distribution SiteLocky
beautifulhosting.com.au
Web Address Registration (n/a)
2016-07-26 12:46Distribution SiteLocky
brasconsult.ru
RU-CENTER-RU5.101.152.86 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
psclimat.ru
NETHOUSE-RU185.93.108.90 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
bobbysinghwpg.com
GODADDY.COM, LLC192.186.246.98 (- United States)
2016-07-26 12:46Distribution SiteLocky
mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)
2016-07-26 12:46Distribution SiteLocky
schlebach.25mm.ru
R01-RU93.171.222.110 (- Russian Federation)
2016-07-26 12:46Distribution SiteLocky
tvoy-android.com
HOSTING UKRAINE LLC185.68.16.83 (- Ukraine)
2016-07-26 12:46Distribution SiteLocky
krvrn2.bget.ru
R01-RU (n/a)
2016-07-26 12:45Distribution SiteLocky
mylimajai.lt
UAB "Interneto vizija" (n/a)
2016-07-26 12:45Distribution SiteLocky
sveikata-jums.lt
UAB "Interneto vizija"194.135.87.233 (- Lithuania)
2016-07-26 11:58Botnet C&CLocky
91.234.35.216
91.234.35.216 (- Ukraine)
2016-07-26 11:58Botnet C&CLocky
31.41.47.41
31.41.47.41 (- Russian Federation)
2016-07-26 11:38Distribution SiteLocky
djk-st-arnual.de
(n/a)
2016-07-26 11:37Distribution SiteLocky
topmanagers.claas.fr
E.L.B. MULTIMEDIA - Netissime (n/a)
2016-07-26 11:37Distribution SiteLocky
finaledithon.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.48 (- United States)
2016-07-26 11:37Distribution SiteLocky
tpllaw.com
DOMAINPEOPLE, INC.216.87.186.90 (- United States)
2016-07-26 11:37Distribution SiteLocky
www.louislechien.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-07-26 11:37Distribution SiteLocky
bettina-mikulle.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 11:37Distribution SiteLocky
www.anti-gewalt-training-sh.de
81.169.145.105 (- Germany)
2016-07-26 11:37Distribution SiteLocky
www.annamariapanarello.org
Ascio Technologies, Inc. Danmark[...] (n/a)
2016-07-26 11:37Distribution SiteLocky
r-p-b.de
(n/a)
2016-07-26 11:37Distribution SiteLocky
koushuen.co.jp
202.191.118.232 (- Japan)
2016-07-26 11:37Distribution SiteLocky
www.foto-aeree.it
TISCALIDOMAIN-REG81.29.220.209 (- Italy)
2016-07-26 11:37Distribution SiteLocky
www.motoslittetrecime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
zoologiczny.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-07-26 11:37Distribution SiteLocky
2ahiru2school.houkou-onchi.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-26 11:37Distribution SiteLocky
www.westline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-26 11:37Distribution SiteLocky
svc026.wic011v.server-web.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]202.148.139.25 (- Australia)
2016-07-26 11:36Distribution SiteLocky
tonerliber.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.44 (- United States)
2016-07-26 11:36Distribution SiteLocky
optilogus.com
NAME.COM, INC.154.93.130.124 (- United States)
2016-07-26 11:36Distribution SiteLocky
ostseeurlaub-tk.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-26 11:36Distribution SiteLocky
www.hfs.url.tw
HINET211.72.207.202 (- Taiwan)
2016-07-26 11:36Distribution SiteLocky
www.zenemuzeum.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-07-26 11:36Distribution SiteLocky
www.marina188.com.br
187.45.195.184 (- Brazil)
2016-07-26 11:36Distribution SiteLocky
download.yaoizm.ru
RU-CENTER-RU (n/a)
2016-07-26 11:36Distribution SiteLocky
mond.50webs.com
GODADDY.COM, LLC162.210.101.21 (- United States)
2016-07-26 11:36Distribution SiteLocky
czemarserwis.home.pl
home.pl S.A.188.128.137.126 (- Poland)
2016-07-26 11:36Distribution SiteLocky
www.sistronic.com.co
DOMINIO AMIGO204.11.59.175 (- United States)
2016-07-26 11:35Distribution SiteLocky
www.isleofwightcomputerrepairs.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-26 11:35Distribution SiteLocky
tulapoligrafist.ru
REGISTRATOR-RU31.193.121.202 (- Russian Federation)
2016-07-26 08:24Payment SiteCerber
unocl45trpuoefft.jsotn5.top
Alpnames Limited (n/a)
2016-07-26 05:56Payment SiteCerber
27lelchgcvs2wpm7.bestfordownload.click
Alpnames Limited (n/a)
2016-07-26 03:16Payment SiteCerber
4kqd3hmqgptupi3p.143h2a.top
Eranet International Limited (n/a)
2016-07-25 21:13Botnet C&CLocky
kwontdmplpnbl.pw
Namecheap208.100.26.234 (- United States)
2016-07-25 16:35Payment SiteCerber
pmenboeqhyrpvomq.yw4629.top
Alpnames Limited (n/a)
2016-07-25 15:58Payment SiteCerber
4kqd3hmqgptupi3p.859rkn.top
Eranet International Limited (n/a)
2016-07-25 14:44Payment SiteCerber
4kqd3hmqgptupi3p.62er3d.top
Alpnames Limited (n/a)
2016-07-25 14:43Payment SiteCerber
52uo5k3t73ypjije.lba61x.top
Alpnames Limited (n/a)
2016-07-25 14:09Distribution SiteLocky
stegnjaic.50webs.com
GODADDY.COM, LLC162.210.101.86 (- United States)
2016-07-25 14:09Distribution SiteLocky
djk-st-arnual.de
(n/a)
2016-07-25 14:08Distribution SiteLocky
moloko-votkinsk.ru
RU-CENTER-RU195.208.1.109 (- Russian Federation)
2016-07-25 14:08Distribution SiteLocky
perceibe.50webs.com
GODADDY.COM, LLC162.210.101.126 (- United States)
2016-07-25 13:55Payment SiteCerber
52uo5k3t73ypjije.1bipa9.top
Alpnames Limited (n/a)
2016-07-25 13:39Payment SiteCerber
unocl45trpuoefft.ckw9fm.top
Eranet International Limited (n/a)
2016-07-25 13:17Payment SiteCerber
unocl45trpuoefft.u64rj2.top
Eranet International Limited (n/a)
2016-07-25 13:10Payment SiteCerber
pmenboeqhyrpvomq.wn4h1k.top
Eranet International Limited (n/a)
2016-07-25 12:46Distribution SiteLocky
www.aproso.de
81.169.145.66 (- Germany)
2016-07-25 12:46Distribution SiteLocky
r-p-b.de
(n/a)
2016-07-25 12:46Distribution SiteLocky
ostseeurlaub-tk.homepage.t-online.de
80.150.6.138 (- Germany)
2016-07-25 12:46Distribution SiteLocky
www.motoslittetrecime.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-25 12:46Distribution SiteLocky
www.westline.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-25 12:46Distribution SiteLocky
koushuen.co.jp
202.191.118.232 (- Japan)
2016-07-25 12:46Distribution SiteLocky
www.ciapparelli.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]23.20.239.12 (- United States)
2016-07-25 12:46Distribution SiteLocky
moehakiba.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.132 (- United States)
2016-07-25 12:46Distribution SiteLocky
www.louislechien.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-07-25 12:46Distribution SiteLocky
www.tridi.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-07-25 12:46Distribution SiteLocky
www.gruetzi.es
87.98.231.2 (- Spain)
2016-07-25 12:46Distribution SiteLocky
www.isleofwightcomputerrepairs.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-25 12:46Distribution SiteLocky
czemarserwis.home.pl
home.pl S.A.188.128.137.126 (- Poland)
2016-07-25 12:46Distribution SiteLocky
vplegat.dk
46.30.215.236 (- Denmark)
2016-07-25 12:45Distribution SiteLocky
zemlya.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.165 (- United States)
2016-07-25 12:45Distribution SiteLocky
tutomogiya.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.16 (- United States)
2016-07-25 12:45Distribution SiteLocky
tpllaw.com
DOMAINPEOPLE, INC.216.87.186.90 (- United States)
2016-07-25 12:45Distribution SiteLocky
cantrell.biz
NETWORK SOLUTIONS, LLC205.178.145.108 (- United States)
2016-07-25 12:45Distribution SiteLocky
topmanagers.claas.fr
E.L.B. MULTIMEDIA - Netissime (n/a)
2016-07-25 12:45Distribution SiteLocky
www.sistronic.com.co
DOMINIO AMIGO204.11.59.175 (- United States)
2016-07-25 12:21Distribution SiteLocky
www.vakantiehuisjeameland.nl
D-Hosting81.18.172.50 (- Netherlands)
2016-07-25 12:21Distribution SiteLocky
www.foto-aeree.it
TISCALIDOMAIN-REG81.29.220.209 (- Italy)
2016-07-25 12:21Distribution SiteLocky
finaledithon.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.48 (- United States)
2016-07-25 12:21Distribution SiteLocky
mhcontrat.50webs.com
GODADDY.COM, LLC162.210.101.126 (- United States)
2016-07-25 11:40Payment SiteCerber
52uo5k3t73ypjije.rl0bdw.top
Alpnames Limited (n/a)
2016-07-25 09:39Payment SiteCerber
unocl45trpuoefft.cgf59i.top
Eranet International Limited (n/a)
2016-07-25 08:38Payment SiteCerber
52uo5k3t73ypjije.a2uzpe.top
Alpnames Limited (n/a)
2016-07-25 06:29Payment SiteCerber
pmenboeqhyrpvomq.asxjdp.top
Alpnames Limited (n/a)
2016-07-25 06:05Payment SiteCerber
4kqd3hmqgptupi3p.twz1ga.top
Alpnames Limited (n/a)
2016-07-25 05:15Payment SiteCerber
52uo5k3t73ypjije.62er3d.top
Alpnames Limited (n/a)
2016-07-25 04:04Payment SiteCerber
52uo5k3t73ypjije.ovpgod.top
Alpnames Limited (n/a)
2016-07-24 18:14Payment SiteCerber
4kqd3hmqgptupi3p.1tvjk1.top
Eranet International Limited (n/a)
2016-07-24 17:47Payment SiteCerber
52uo5k3t73ypjije.e8hua8.top
Eranet International Limited (n/a)
2016-07-24 17:23Payment SiteCerber
4kqd3hmqgptupi3p.3arvfd.top
Alpnames Limited (n/a)
2016-07-24 16:47Payment SiteCerber
unocl45trpuoefft.k56185.top
Alpnames Limited (n/a)
2016-07-24 16:23Payment SiteCerber
4kqd3hmqgptupi3p.gs2ka7.top
Alpnames Limited (n/a)
2016-07-24 13:10Payment SiteCerber
unocl45trpuoefft.8uwckh.top
Alpnames Limited (n/a)
2016-07-24 07:56Payment SiteCerber
unocl45trpuoefft.1v3bnu.top
Eranet International Limited (n/a)
2016-07-24 07:29Payment SiteCerber
unocl45trpuoefft.cypz3w.top
Alpnames Limited (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >