Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-16 07:58Distribution SiteLocky
demo.evgesha.ru
RU-CENTER-RU95.165.159.185 (- Russian Federation)
2016-12-16 07:58Distribution SiteLocky
seller.affordbuy.com
GODADDY.COM, LLC192.186.204.105 (- United States)
2016-12-16 07:58Distribution SiteLocky
ozzcleanenergy.com
GODADDY.COM, LLC198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-12-16 07:58Distribution SiteLocky
toastmedia.co.uk
LCN.com Ltd50.116.107.239 (- United States)
2016-12-16 07:58Distribution SiteLocky
monbega.info
Todaynic.com, Inc. (n/a)
2016-12-16 07:57Distribution SiteLocky
twilighttrailrun.com
ENOM, INC.98.124.252.140 (- United States)
2016-12-16 07:57Distribution SiteLocky
www.majorleaguesecurity.com
GODADDY.COM, LLC107.180.23.105 (- United States)
2016-12-16 07:57Distribution SiteLocky
mattdorman.com
TUCOWS DOMAINS INC.192.254.217.139 (- United States)
2016-12-16 07:57Distribution SiteLocky
2kindustri.se
Loopia AB (n/a)
2016-12-16 07:57Distribution SiteLocky
aquiestoy.org
GoDaddy.com, LLC50.30.34.57 (- United States)
2016-12-16 07:57Distribution SiteLocky
followmyleadatl.com
GODADDY.COM, LLC50.6.244.121 (- United States)
2016-12-16 07:57Distribution SiteLocky
kanibir.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-12-16 07:57Distribution SiteLocky
fotoserver4.cyper.at
144.76.45.55 (- Germany)
2016-12-16 07:57Distribution SiteLocky
www.draaksteken.nl
Computel Standby bv78.41.77.211 (- Netherlands)
2016-12-16 07:57Distribution SiteLocky
inoxcaocap.com.vn
210.86.239.25 (- Vietnam)
2016-12-16 07:57Distribution SiteLocky
www.redcitymedia.nl
AXC (n/a)
2016-12-16 07:57Distribution SiteLocky
xxxtina.ru
REGRU-RU (n/a)
2016-12-16 00:41Botnet C&CLocky
37.235.50.29
37.235.50.29 (- Switzerland)
2016-12-15 12:51Distribution SiteLocky
kanibir.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-12-15 12:51Distribution SiteLocky
rietdekker-brabant.nl
AXC104.27.130.253 (- United States) +1 A record(s) 104.27.131.253 (AS13335, - United States)
2016-12-15 12:51Distribution SiteLocky
mobile.beliar.ru
REGRU-RU141.8.193.7 (- Russian Federation)
2016-12-15 12:51Distribution SiteLocky
polywaste.co.zw
196.44.177.66 (- Zimbabwe)
2016-12-15 12:51Distribution SiteLocky
almamedical.es
31.193.142.205 (- United Kingdom)
2016-12-15 12:50Distribution SiteLocky
support.ichr.de
(n/a)
2016-12-15 12:50Distribution SiteLocky
monbega.info
Todaynic.com, Inc. (n/a)
2016-12-15 12:50Distribution SiteLocky
cms-demo.is-it-on.at
195.34.220.6 (- Austria)
2016-12-15 12:50Distribution SiteLocky
kitchencadd.net
ENOM, INC. (n/a)
2016-12-15 12:50Distribution SiteLocky
v-mukko.ru
REGRU-RU188.40.108.57 (- Germany)
2016-12-15 12:50Distribution SiteLocky
twilighttrailrun.com
ENOM, INC.98.124.252.140 (- United States)
2016-12-15 12:49Distribution SiteLocky
stjudetravelandtours.com
TLD REGISTRAR SOLUTIONS LTD46.21.172.167 (- Netherlands)
2016-12-15 12:49Distribution SiteLocky
test.3ks.nl
The Registrar Company B.V.5.61.248.107 (- Netherlands)
2016-12-15 12:49Distribution SiteLocky
property-forsale-in-malta.com
ENOM, INC.109.75.172.166 (- United Kingdom)
2016-12-15 12:49Distribution SiteLocky
test.ss1.eu
OpenTLD B.V.123.57.205.182 (- China)
2016-12-15 12:49Distribution SiteLocky
m.besthairsaloncolumbia.com
WILD WEST DOMAINS, LLC208.86.153.196 (- United States)
2016-12-15 12:49Distribution SiteLocky
nlyuniforma.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]94.102.0.160 (- Turkey)
2016-12-15 12:49Distribution SiteLocky
webmail.chukai.co.th
T.H.NIC Co., Ltd.203.170.145.13 (- Thailand)
2016-12-15 12:49Distribution SiteLocky
seller.affordbuy.com
GODADDY.COM, LLC192.186.204.105 (- United States)
2016-12-15 12:49Distribution SiteLocky
davidtomkins.info
NameCheap, Inc149.255.59.165 (- United Kingdom)
2016-12-15 12:49Distribution SiteLocky
campingmclaren.com
1&1 INTERNET SE67.231.17.118 (- Canada)
2016-12-15 12:49Distribution SiteLocky
vsnege.ru
REGRU-RU178.208.81.111 (- Russian Federation)
2016-12-15 12:49Distribution SiteLocky
inoxcaocap.com.vn
210.86.239.25 (- Vietnam)
2016-12-15 12:48Distribution SiteLocky
backup.dressageclinic.com
DELUXE SMALL BUSINESS SALES, INC[...]192.124.249.157 (- United States)
2016-12-15 12:48Distribution SiteLocky
www.teotozmaskesi.com
REALTIME REGISTER BV217.195.198.18 (- Turkey)
2016-12-15 12:48Distribution SiteLocky
teblog.ir
185.94.97.202 (- Iran)
2016-12-15 12:48Distribution SiteLocky
noss.co.za
129.121.3.180 (- United States)
2016-12-15 12:48Distribution SiteLocky
aladdinscarpet.com
1 API GMBH89.185.234.231 (- Czech Republic)
2016-12-15 12:48Distribution SiteLocky
xn--80ajjchqepikd1b.xn--80asehdb
(n/a)
2016-12-15 12:48Distribution SiteLocky
eteba.gr
178.21.175.179 (- Greece)
2016-12-15 12:48Distribution SiteLocky
www.draaksteken.nl
Computel Standby bv78.41.77.211 (- Netherlands)
2016-12-15 10:58Distribution SiteLocky
jybedb.com
DROPCATCH.COM 881 LLC112.84.124.80 (- China)
2016-12-15 06:53Distribution SiteLocky
demo.shispare.com
1&1 INTERNET SE68.65.122.198 (- United States)
2016-12-15 06:53Distribution SiteLocky
groupeelectrogeneservice.com
1&1 INTERNET SE217.160.233.132 (- Germany)
2016-12-15 06:53Distribution SiteLocky
lamsangda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]45.117.81.133 (- Vietnam)
2016-12-15 06:53Distribution SiteLocky
atio.li
92.43.218.114 (- Switzerland)
2016-12-15 06:53Distribution SiteLocky
www.sajuname131.com
GABIA, INC.222.122.56.76 (- Korea)
2016-12-15 06:52Distribution SiteLocky
trietlong.net
NAME.COM, INC.103.232.121.92 (- Vietnam)
2016-12-15 06:52Distribution SiteLocky
mirror-ufa.ru
REGRU-RU31.31.203.119 (- Russian Federation)
2016-12-15 06:52Distribution SiteLocky
subys.com
DOTNAME KOREA CORP (n/a)
2016-12-15 06:52Distribution SiteLocky
test.sousouyo.com
HICHINA ZHICHENG TECHNOLOGY LTD.210.83.80.26 (- China)
2016-12-15 06:52Distribution SiteLocky
www.skolickasovicka.cz
REG-INTERNET-CZ81.2.195.30 (- Czech Republic)
2016-12-15 06:51Distribution SiteLocky
obaloco.com.br
177.52.160.43 (- Brazil)
2016-12-15 06:51Distribution SiteLocky
www.myboatplans.net
FBS INC.5.2.81.171 (- Turkey)
2016-12-15 06:51Distribution SiteLocky
wordpress.kikihairandbeauty.co.uk
1 & 1 Internet SE217.160.231.250 (- Germany)
2016-12-15 06:51Distribution SiteLocky
slankmethode.nl
Webcreators Internet Services (n/a)
2016-12-15 06:51Distribution SiteLocky
buhoutserts.ru
REGRU-RU (n/a)
2016-12-15 06:51Distribution SiteLocky
www.al-hasany.com
GODADDY.COM, LLC172.93.102.85 (- United States)
2016-12-15 06:51Distribution SiteLocky
www.qubamosque.org
Crazy Domains FZ-LLC27.124.116.109 (- Australia)
2016-12-15 06:50Distribution SiteLocky
ozzcleanenergy.com
GODADDY.COM, LLC198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-12-15 06:50Distribution SiteLocky
maxibutor.hu
194.38.104.132 (- Hungary)
2016-12-15 06:50Distribution SiteLocky
www.draaksteken.nl
Computel Standby bv78.41.77.211 (- Netherlands)
2016-12-15 06:49Distribution SiteLocky
0668.com
HICHINA ZHICHENG TECHNOLOGY LTD.121.10.141.46 (- China)
2016-12-15 06:49Distribution SiteLocky
yukngobrol.com
CV. JOGJACAMP116.90.165.75 (- Indonesia)
2016-12-15 06:49Distribution SiteLocky
forbrent.com
TIERRANET INC. D/B/A DOMAINDISCO[...]216.104.165.17 (- United States) +1 A record(s) 216.104.165.77 (AS10732, - United States)
2016-12-15 06:49Distribution SiteLocky
fyd123.cn
阿里云计算有限公司([...]113.6.251.83 (- China)
2016-12-15 06:48Distribution SiteLocky
autozirkus.com
ENOM, INC. (n/a)
2016-12-15 06:48Distribution SiteLocky
2kindustri.se
Loopia AB (n/a)
2016-12-15 06:48Distribution SiteLocky
neu.hansmuennich.de.baugebiet-stadlhof.de
212.172.50.111 (- Germany)
2016-12-15 06:48Distribution SiteLocky
ekbundit.com
GODADDY.COM, LLC67.227.188.226 (- United States)
2016-12-15 06:48Distribution SiteLocky
u-niwon.com
NETPIA.COM, INC.218.232.104.232 (- Korea)
2016-12-15 06:47Distribution SiteLocky
www.espansioneimmobiliare.com
WILD WEST DOMAINS, LLC192.124.249.107 (- United States)
2016-12-15 06:47Distribution SiteLocky
wszystkodokuchni.pl
premium.pl Sp. z o.o.155.133.40.82 (- Poland)
2016-12-15 06:46Distribution SiteLocky
test.maciejdudek.com.pl
Domeny.pl sp. z o.o.91.225.28.120 (- Poland)
2016-12-15 06:46Distribution SiteLocky
dev.bychancefarm.com
DREAMHOST, LLC (n/a)
2016-12-15 06:46Distribution SiteLocky
wudiai.com
ENAME TECHNOLOGY CO., LTD.119.29.9.237 (- China)
2016-12-15 06:45Distribution SiteLocky
killdoors.myjino.ru
R01-RU81.177.141.242 (- Russian Federation)
2016-12-15 06:45Distribution SiteLocky
windshieldrepairvancouver.ca
eNom Canada Corp.68.65.122.56 (- United States)
2016-12-15 06:45Distribution SiteLocky
puzzrollrings.com
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-12-15 06:45Distribution SiteLocky
dcipostdoc.com
GODADDY.COM, LLC203.162.53.106 (- Vietnam)
2016-12-15 06:45Distribution SiteLocky
szwanrong.com
XIN NET TECHNOLOGY CORPORATION119.29.99.214 (- China)
2016-12-15 06:44Distribution SiteLocky
suivresanature.net
TUCOWS DOMAINS INC.213.246.62.39 (- France)
2016-12-15 06:44Distribution SiteLocky
catherineduret.ch
128.65.195.140 (- Switzerland)
2016-12-15 06:44Distribution SiteLocky
web-shuttle.in
GoDaddy.com, LLC (R101-AFIN)107.180.47.3 (- United States)
2016-12-15 06:44Distribution SiteLocky
terrabit.ro
ICI - ROTLD89.40.36.58 (- Romania)
2016-12-15 06:44Distribution SiteLocky
wiselysoft.com
GODADDY.COM, LLC (n/a)
2016-12-15 06:43Distribution SiteLocky
mechanikkapusta.pl
WMK Invest Sp. z o.o.31.186.82.141 (- Poland)
2016-12-15 06:43Distribution SiteLocky
environment.ae
Etisalat104.24.122.60 (- United States) +1 A record(s) 104.24.123.60 (AS13335, - United States)
2016-12-15 06:43Distribution SiteLocky
scaune.qmagazin.ro
Romarg SRL93.115.108.232 (- Romania)
2016-12-15 06:42Distribution SiteLocky
crolic88.myjino.ru
R01-RU81.177.139.41 (- Russian Federation)
2016-12-15 06:42Distribution SiteLocky
quanuvcut.com
NHAN HOA SOFTWARE COMPANY LTD209.99.40.223 (- United States)
2016-12-15 06:42Distribution SiteLocky
viscarci.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >