Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-02 14:21Distribution SiteLocky
malwinstall.wang
Todaynic com Inc (n/a)
2016-09-02 14:21Distribution SiteLocky
pp4_09_10_2s.republika.pl
213.180.141.189 (- Poland)
2016-09-02 14:21Distribution SiteLocky
www.mussystems.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-02 14:21Distribution SiteLocky
www.runningmen-mk.de
178.63.40.20 (- Germany)
2016-09-02 14:21Distribution SiteLocky
www.alpstaxi.co.jp
211.134.181.38 (- Japan)
2016-09-02 14:20Distribution SiteLocky
albertowe.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 14:20Distribution SiteLocky
www.termoalbiate.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 14:20Distribution SiteLocky
www.alessandrocangiano.com
TUCOWS DOMAINS INC.195.78.215.76 (- Italy)
2016-09-02 14:20Distribution SiteLocky
www.malicioso.net
NOMINALIA INTERNET S.L.62.42.230.17 (- Spain)
2016-09-02 14:18Distribution SiteLocky
www.motortecnica.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 14:18Distribution SiteLocky
www.informaonline.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 14:17Distribution SiteLocky
lokum1985.republika.pl
Domeny.pl sp. z o.o.213.180.141.189 (- Poland)
2016-09-02 14:16Distribution SiteLocky
andante-co.jp
(n/a)
2016-09-02 14:16Distribution SiteLocky
www.anacuamic.com
ENOM, INC.95.211.113.12 (- Netherlands)
2016-09-02 14:16Distribution SiteLocky
clubofmalw.ws
Eranet International Limited173.230.130.175 (- United States)
2016-09-02 14:16Distribution SiteLocky
abcbureautique.abc.perso.neuf.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-02 14:15Distribution SiteLocky
danzig.vtrbandaancha.net
REGISTER.COM, INC.200.83.3.52 (- Chile)
2016-09-02 14:15Distribution SiteLocky
www.caminettilcd.it
MCLINK-REG (n/a)
2016-09-02 14:15Distribution SiteLocky
bajkowestokrotki.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 14:15Distribution SiteLocky
158.195.68.10
n/a
2016-09-02 14:14Distribution SiteLocky
dcqoutlet.es
(n/a)
2016-09-02 14:14Distribution SiteLocky
www.saumi.jazztel.es
62.14.3.195 (- Spain)
2016-09-02 14:13Distribution SiteLocky
www.threshold-online.co.uk
Plusnet Plc t/a Madasafish Broad[...]212.159.8.151 (- United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, - United Kingdom)
2016-09-02 14:13Distribution SiteLocky
srxrun.nobody.jp
112.140.42.29 (- Japan)
2016-09-02 14:12Distribution SiteLocky
news.oboyle.ro
ICI - ROTLD (n/a)
2016-09-02 14:12Distribution SiteLocky
maxshoppppsr.biz
ERANET INTERNATIONAL LIMITED (n/a)
2016-09-02 14:12Distribution SiteLocky
maxshoppppsr.biz
ERANET INTERNATIONAL LIMITED (n/a)
2016-09-02 14:11Distribution SiteLocky
www.cortesidesign.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 14:11Distribution SiteLocky
bookinghotworld.ws
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-02 14:11Distribution SiteLocky
postaldigitalrs.com.br
187.45.193.139 (- Brazil)
2016-09-02 14:09Distribution SiteLocky
www.dallaglio-nordin.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 14:09Distribution SiteLocky
e-gmp.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-09-02 14:07Botnet C&CLocky
eywlmqugxx.info
Dynadot, LLC69.195.129.70 (- United States)
2016-09-02 11:20Payment SiteCerber
unocl45trpuoefft.gg4dgp.bid
Eranet International Limited (n/a)
2016-09-02 11:08Payment SiteCerber
4kqd3hmqgptupi3p.boxtimed.gdn
AlpNames Limited (n/a)
2016-09-02 10:43Payment SiteCerber
52uo5k3t73ypjije.9sfrr0.bid
Eranet International Limited (n/a)
2016-09-02 10:31Payment SiteCerber
4kqd3hmqgptupi3p.effortany.win
Alpnames Limited (n/a)
2016-09-02 10:25Payment SiteCerber
52uo5k3t73ypjije.c3fz3z.bid
Eranet International Limited (n/a)
2016-09-02 10:22Payment SiteCerber
52uo5k3t73ypjije.k8ytej.bid
Eranet International Limited (n/a)
2016-09-02 07:53Distribution SiteLocky
www.montegelato.it
TISCALIDOMAIN-REG213.205.38.40 (- Italy)
2016-09-02 07:51Distribution SiteLocky
rosivani.go.ro
ICI - ROTLD81.196.20.134 (- Romania)
2016-09-02 07:48Distribution SiteLocky
sitio655.vtrbandaancha.net
REGISTER.COM, INC.200.83.3.52 (- Chile)
2016-09-02 07:47Distribution SiteLocky
www.john.edmunds.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-02 07:44Payment SiteCerber
52uo5k3t73ypjije.ldsl8m.bid
Eranet International Limited (n/a)
2016-09-02 07:34Payment SiteCerber
unocl45trpuoefft.vmomcc.bid
Eranet International Limited (n/a)
2016-09-02 07:27Payment SiteCerber
unocl45trpuoefft.igpfcu.bid
Eranet International Limited (n/a)
2016-09-02 07:13Payment SiteCerber
52uo5k3t73ypjije.4jub4e.bid
Eranet International Limited (n/a)
2016-09-02 06:55Payment SiteCerber
52uo5k3t73ypjije.x9kjcn.bid
Eranet International Limited (n/a)
2016-09-02 06:43Payment SiteCerber
52uo5k3t73ypjije.k0dcd2.bid
Eranet International Limited (n/a)
2016-09-02 06:25Payment SiteCerber
4kqd3hmqgptupi3p.g7kcux.bid
Eranet International Limited (n/a)
2016-09-02 05:26Payment SiteCerber
52uo5k3t73ypjije.kt70uk.bid
Eranet International Limited (n/a)
2016-09-02 05:09Distribution SiteLocky
www.one-clap.jp
163.43.80.67 (- Japan)
2016-09-02 05:08Distribution SiteLocky
josemedina.com
TUCOWS DOMAINS INC.67.225.176.60 (- United States)
2016-09-02 05:08Distribution SiteLocky
www.bytove.jadro.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-09-02 05:07Distribution SiteLocky
aivee.koiwazurai.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-09-02 05:07Distribution SiteLocky
sp-moto.ru
REGTIME-RU (n/a)
2016-09-02 05:07Distribution SiteLocky
abcbureautique.abc.perso.neuf.fr
Société Française du Radioté[...]86.65.123.70 (- France)
2016-09-02 05:07Distribution SiteLocky
capannoneinliguria.com
OWN IDENTITY, INC84.33.0.247 (- Italy)
2016-09-02 05:07Distribution SiteLocky
www.plumbntile.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-02 05:07Distribution SiteLocky
portadeenrolar.ind.br
158.106.185.63 (- United States)
2016-09-02 05:06Distribution SiteLocky
www.gsprzemkow.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-09-02 05:06Distribution SiteLocky
194.28.172.166
n/a
2016-09-02 05:06Distribution SiteLocky
www.ccnprodusenaturiste.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-09-02 05:06Distribution SiteLocky
www.john.edmunds.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-09-02 05:06Distribution SiteLocky
www.vanetti.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 05:06Distribution SiteLocky
yggithuq.utawebhost.at
195.248.63.109 (- Austria)
2016-09-02 05:06Distribution SiteLocky
sojasaude.com.br
187.45.195.136 (- Brazil)
2016-09-02 05:06Distribution SiteLocky
www.spiritueelcentrumaum.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-09-02 05:05Distribution SiteLocky
foerschl.gmxhome.de
82.165.62.70 (- Germany)
2016-09-02 05:05Distribution SiteLocky
t-schoener.de
(n/a)
2016-09-02 05:05Distribution SiteLocky
inge28.mytactis.com
OVH (n/a)
2016-09-02 05:05Distribution SiteLocky
www.automac.it
MCLINK-REG195.78.215.76 (- Italy)
2016-09-02 05:04Distribution SiteLocky
www.erretisnc.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-09-02 05:04Distribution SiteLocky
toukontoutaukaiazalea.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.136 (- United States)
2016-09-02 05:04Distribution SiteLocky
www.alpstaxi.co.jp
211.134.181.38 (- Japan)
2016-09-02 05:04Distribution SiteLocky
t-schoener.de
(n/a)
2016-09-02 05:04Distribution SiteLocky
6rota.costav.edusite.ru
RU-CENTER-RU85.193.69.29 (- Russian Federation)
2016-09-02 05:04Distribution SiteLocky
www.xolod-teplo.ru
REGTIME-RU46.254.21.127 (- Russian Federation)
2016-09-02 05:03Distribution SiteLocky
quinteam.com
DINAHOSTING SL92.54.16.213 (- Spain)
2016-09-02 05:03Distribution SiteLocky
www.empolio.com
ENOM, INC.213.204.1.56 (- Italy)
2016-09-02 05:03Distribution SiteLocky
mixup0813.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-09-02 05:03Distribution SiteLocky
andante-co.jp
(n/a)
2016-09-02 05:03Distribution SiteLocky
bajkowestokrotki.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-09-02 05:03Botnet C&CLocky
ssvylrn.pw
Registrar of Domain Names REG.RU[...]n/a
2016-09-02 05:02Distribution SiteLocky
www.saumi.jazztel.es
62.14.3.195 (- Spain)
2016-09-02 05:02Distribution SiteLocky
michik.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.47 (- United States)
2016-09-02 05:02Distribution SiteLocky
www.beniculturali.org
Ascio Technologies, Inc. Danmark[...]213.205.40.169 (- Italy)
2016-09-02 05:01Distribution SiteLocky
foerschl.gmxhome.de
82.165.62.70 (- Germany)
2016-09-02 05:01Distribution SiteLocky
bushman-rest.com
CRONON AG81.169.145.82 (- Germany)
2016-09-02 05:01Distribution SiteLocky
www.parrucchieriagiacomo.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-09-02 05:01Distribution SiteLocky
www.trauchgauer-weihnachtsmarkt.de
109.237.140.20 (- Germany)
2016-09-02 05:01Distribution SiteLocky
body-fitness.net
NETWORK SOLUTIONS, LLC.81.88.57.68 (- Italy)
2016-09-02 05:00Distribution SiteLocky
www.dietmar-bernhard.de
(n/a)
2016-09-02 05:00Distribution SiteLocky
www.aktion-zukunft-gestalten.info
Ascio Technologies, Inc. Danmark[...]81.169.145.224 (- Germany)
2016-09-02 05:00Distribution SiteLocky
www.coropeppinumereu.it
TISCALIDOMAIN-REG (n/a)
2016-09-02 05:00Distribution SiteLocky
sebangou8.xxxxxxxx.jp
112.140.42.29 (- Japan)
2016-09-02 05:00Distribution SiteLocky
namadol.x.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.171 (- United States)
2016-09-02 05:00Distribution SiteLocky
danzig.vtrbandaancha.net
REGISTER.COM, INC.200.83.3.52 (- Chile)
2016-09-02 05:00Botnet C&CLocky
212.109.192.235
212.109.192.235 (- Russian Federation)
2016-09-02 05:00Botnet C&CLocky
149.154.152.108
149.154.152.108 (- Austria)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >