Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-02-07 06:35Botnet C&CLocky
193.70.103.182
193.70.103.182 (- Italy)
2016-12-21 16:19Distribution SiteLocky
ashpeptide.com
JIANGSU BANGNING SCIENCE & TECHN[...]47.90.76.65 (- Canada)
2016-12-19 14:01Distribution SiteLocky
globaser3000.com
ARSYS INTERNET, S.L. D/B/A NICLI[...]178.33.162.81 (- Spain)
2016-12-12 13:06Distribution SiteLocky
softwarecomparel.org
Todaynic.com, Inc.104.168.87.215 (- United States) +2 A record(s) 162.244.78.182 (AS19531, - United States)
54.187.5.20 (AS16509, - United States)
2016-12-02 13:01Distribution SiteLocky
vazmaz.com
WEB COMMERCE COMMUNICATIONS LIMI[...]183.81.164.154 (- Malaysia)
2016-11-27 00:51Botnet C&CLocky
213.32.90.193
213.32.90.193 (- Denmark)
2016-11-10 16:31Distribution SiteLocky
jobazine.com
BIGROCK SOLUTIONS LIMITED198.27.89.169 (- United States)
2016-11-08 16:27Distribution SiteLocky
halerblot.com
WEB COMMERCE COMMUNICATIONS LIMI[...]213.176.241.230 (- Russian Federation) +1 A record(s) 67.171.65.64 (AS7922, - United States)
2016-11-03 15:29Distribution SiteLocky
dingeabyss.com
KEY-SYSTEMS GMBH213.176.241.230 (- Russian Federation) +1 A record(s) 67.171.65.64 (AS7922, - United States)
2016-10-31 10:37Distribution SiteLocky
blogmepro.com
BIGROCK SOLUTIONS LIMITED192.185.109.183 (- United States)
2016-10-27 11:35Distribution SiteLocky
dollsdelight.com
CRAZY DOMAINS FZ-LLC192.185.103.102 (- United States)
2016-10-25 14:50Distribution SiteLocky
njykvalve.com
XIAMEN CHINASOURCE INTERNET SERV[...]116.255.212.5 (- China)
2016-10-11 19:58Botnet C&CLocky
137.74.46.46
137.74.46.46 (- Hong Kong)
2016-10-07 05:07Distribution SiteLocky
www.resumebuddy.net
ENOM, INC.108.174.196.88 (- United States)
2016-10-04 09:53Distribution SiteLocky
zeismanita.com
KEY-SYSTEMS GMBH190.181.40.51 (- Bolivia) +1 A record(s) 31.210.120.156 (AS197328, - Turkey)
2016-09-05 16:45Distribution SiteLocky
treasure-force.com
ENOM, INC.68.65.121.203 (- United States)
2016-07-25 21:13Botnet C&CLocky
51.254.181.120
51.254.181.120 (- France)
2016-06-24 19:58Botnet C&CCryptoWall
kahverengider.org
FBS Inc.185.150.128.26 (- Turkey)
2016-05-10 12:30Botnet C&CLocky
185.82.202.170
185.82.202.170 (- Netherlands)
2016-04-28 21:44Botnet C&CLocky
91.234.32.19
91.234.32.19 (- Ukraine)
2016-03-14 07:35Distribution SiteTeslaCrypt
ohelloguyzzqq.com
KEY-SYSTEMS GMBH192.210.144.130 (- United States) +5 A record(s) 201.249.146.59 (AS8048, - Venezuela)
212.119.87.77 (AS34397, - Saudi Arabia)
54.175.175.52 (AS14618, - United States)
54.212.162.6 (AS16509, - United States)
78.135.108.94 (AS42910, - Turkey)
2016-03-07 09:21Botnet C&CTeslaCrypt
tmfilms.net
GODADDY.COM, LLC50.62.122.1 (- United States)
2016-02-22 21:39Botnet C&CCryptoWall
building.msu.ac.th
T.H.NIC Co., Ltd.202.28.32.20 (- Thailand)
2016-02-10 02:18Botnet C&CCryptoWall
www.kadinweb.net
NICS TELEKOMUNIKASYON TICARET LT[...]185.8.33.117 (- Turkey)
2016-02-08 22:32Botnet C&CCryptoWall
www.plexipr.com
ENOM, INC.65.98.35.114 (- United States)
2016-01-27 21:50Botnet C&CTeslaCrypt
toysfortheneedyandaid.org
eNom, Inc.97.107.141.123 (- United States)
2016-01-09 06:13Botnet C&CCryptoWall
d3mpd.fe.uns.ac.id
203.6.149.68 (- Indonesia)
2016-01-01 22:39Botnet C&CCryptoWall
icsot.na.its.ac.id
202.46.129.104 (- Indonesia)
2015-12-29 19:54Botnet C&CCryptoWall
k264.hu
87.229.51.98 (- Hungary)
2015-11-14 16:40Botnet C&CCryptoWall
avancarvisual.com.br
189.26.236.163 (- Brazil)
2012-02-27 19:38Botnet C&CCryptoWall
bidr.trellian.com
ABOVE.COM PTY LTD.103.224.182.206 (- Australia)

# of rows displayed: 31
# of entries in database: 9'211