Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-25 14:00Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-05-25 14:00Distribution SiteLocky
tspipp.tsu.tula.ru
85.142.133.41 (- Russian Federation)
2016-05-25 14:00Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-25 14:00Distribution SiteLocky
digitacaoveloz.com.br
191.252.51.6 (- Brazil)
2016-05-25 14:00Distribution SiteLocky
bankruptcymag.com
MONIKER ONLINE SERVICES LLC45.33.9.234 (- United States)
2016-05-25 14:00Distribution SiteLocky
globalcredithub.com
LAUNCHPAD.COM, INC.107.180.27.233 (- United States)
2016-05-25 14:00Distribution SiteLocky
crimeshurt.com
GODADDY.COM, LLC192.186.240.68 (- United States)
2016-05-25 14:00Distribution SiteLocky
unijovem.com.br
191.252.4.25 (- Brazil)
2016-05-25 14:00Distribution SiteLocky
brunohenrique.net
ENOM, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
avayeparseh.com
ONLINENIC, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
osdc.eu
GANDI195.230.19.15 (- Bulgaria)
2016-05-25 12:01Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC104.18.42.43 (- United States) +1 A record(s) 104.18.43.43 (AS13335, - United States)
2016-05-25 12:01Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV67.205.123.143 (- Canada)
2016-05-25 12:01Distribution SiteLocky
wisebuy.com
GODADDY.COM, LLC97.74.85.102 (- United States)
2016-05-25 12:01Distribution SiteLocky
amazoo.com.br
187.17.111.98 (- Brazil)
2016-05-25 12:01Distribution SiteLocky
jett.com
GODADDY.COM, LLC97.74.85.102 (- United States)
2016-05-25 12:01Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
onestopcableshop.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 12:00Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC104.18.42.43 (- United States) +1 A record(s) 104.18.43.43 (AS13335, - United States)
2016-05-25 12:00Distribution SiteLocky
osdc.eu
GANDI195.230.19.15 (- Bulgaria)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 12:00Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV67.205.123.143 (- Canada)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 10:44Distribution SiteLocky
rsxxx.com
DNC HOLDINGS, INC.69.50.139.6 (- United States)
2016-05-25 10:44Distribution SiteLocky
domyzbali-roztocze.pl
Consulting Service Sp. z o.o.188.116.19.98 (- Poland)
2016-05-25 09:04Botnet C&CDMALocker
5.8.63.54
5.8.63.54 (- Russian Federation)
2016-05-25 08:48Distribution SiteLocky
italianshoemanufacturers.com
GODADDY.COM, LLC52.15.135.111 (- United States)
2016-05-25 08:48Distribution SiteLocky
baltela.lt
UAB "Interneto vizija"79.98.28.25 (- Lithuania)
2016-05-25 08:47Distribution SiteLocky
ontheblocks.com
ENOM, INC.69.64.147.35 (- United States)
2016-05-25 08:47Distribution SiteLocky
wikisecru.402.com1.ru
AGAVA-RU80.78.250.8 (- Russian Federation)
2016-05-25 08:47Distribution SiteLocky
yespos.co.uk
123-Reg Limited t/a 123-reg78.109.168.56 (- United Kingdom)
2016-05-25 08:47Distribution SiteLocky
angads.com.au
NetRegistry52.62.62.110 (- Australia)
2016-05-25 08:46Distribution SiteLocky
jerseyoffers.co.uk
Fasthosts Internet Ltd (n/a)
2016-05-25 02:57Botnet C&CDMALocker
95.213.192.77
95.213.192.77 (- Russian Federation)
2016-05-24 14:53Botnet C&CLocky
31.41.44.45
31.41.44.45 (- Russian Federation)
2016-05-24 10:47Distribution SiteLocky
protei.me
FastDomain Inc.192.124.249.159 (- United States)
2016-05-24 10:47Distribution SiteLocky
serwer1650017.home.pl
home.pl S.A. (n/a)
2016-05-24 10:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:46Distribution SiteLocky
aslfinance.eu
EXO TECHNOLOGIES spol. s r.o.92.240.253.72 (- Slovakia)
2016-05-24 06:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:03Distribution SiteLocky
mandoka.com
KEY-SYSTEMS GMBH176.9.172.190 (- Germany)
2016-05-24 06:03Distribution SiteLocky
freeflyers.com.au
VentraIP Wholesale43.241.54.246 (- Australia)
2016-05-24 05:23Distribution SiteLocky
shop.camacartigrafiche.com
ENOM, INC.185.81.1.19 (- Italy)
2016-05-23 17:22Distribution SiteLocky
fina-mente.com
UNITED-DOMAINS AG (n/a)
2016-05-23 17:02Botnet C&CLocky
92.63.87.53
92.63.87.53 (- Latvia)
2016-05-22 06:33Payment SiteTorrentLocker
stgg5jv6mqiibmax.torpice.li
(n/a)
2016-05-21 16:39Botnet C&CLocky
dtojlhpasjk.pw
Namecheap95.211.174.92 (- Netherlands)
2016-05-21 15:19Botnet C&CLocky
ytcijiooxdtlbevrh.info
Dynadot, LLC69.195.129.70 (- United States)
2016-05-21 14:16Distribution SiteLocky
serienplaner.com
KEY-SYSTEMS GMBH78.46.104.205 (- Germany)
2016-05-21 14:16Distribution SiteLocky
climairuk.com
LCN.COM LTD.85.118.237.109 (- United Kingdom)
2016-05-21 14:16Distribution SiteLocky
onlyher.nazwa.pl
nazwa.pl sp. z o.o.85.128.128.99 (- Poland)
2016-05-21 14:16Distribution SiteLocky
adestudio.w8w.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-21 14:16Distribution SiteLocky
cg.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
im-journal.com
TUCOWS DOMAINS INC. (n/a)
2016-05-21 14:16Distribution SiteLocky
cm.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
bailamecuba.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-21 14:16Distribution SiteLocky
btkdevelopment.ru
RU-CENTER-RU81.177.139.242 (- Russian Federation)
2016-05-21 14:16Distribution SiteLocky
aviainburo.com
INTERNET INVEST, LTD. DBA IMENA.[...]89.184.73.66 (- Ukraine)
2016-05-21 14:16Distribution SiteLocky
btcgroup.lgg.ru
R01-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
forrestsignsonline.com
GODADDY.COM, LLC192.124.249.10 (- United States)
2016-05-21 14:15Distribution SiteLocky
beautifulhosting.com.au
Web Address Registration (n/a)
2016-05-21 14:15Distribution SiteLocky
modaxxl.ro
ICI - ROTLD (n/a)
2016-05-21 14:15Distribution SiteLocky
www.minkssalon.com
WILD WEST DOMAINS, LLC50.63.66.195 (- United States)
2016-05-21 14:15Distribution SiteLocky
margohack.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-21 14:15Distribution SiteLocky
btc4kids.ru
RU-CENTER-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
www.imagewarp.com
ONLINENIC, INC.67.228.0.96 (- United States)
2016-05-21 14:15Distribution SiteLocky
aquapeel.ru
RU-CENTER-RU193.143.77.44 (- Poland)
2016-05-21 14:15Distribution SiteLocky
allergymachine.com
DREAMHOST, LLC (n/a)
2016-05-21 14:15Distribution SiteLocky
justicemandate.org
GoDaddy.com, LLC110.232.140.133 (- Australia)
2016-05-21 14:05Distribution SiteLocky
dubaifridays.com
GODADDY.COM, LLC51.254.139.63 (- France)
2016-05-21 14:04Distribution SiteLocky
blog.rotapost.ru
RU-CENTER-RU88.214.242.46 (- United Kingdom)
2016-05-21 13:24Botnet C&CLocky
149.154.159.179
149.154.159.179 (- Germany)
2016-05-21 13:24Botnet C&CLocky
95.46.114.80
95.46.114.80 (- Czech Republic)
2016-05-21 13:02Botnet C&CLocky
37.235.53.210
37.235.53.210 (- Spain)
2016-05-21 13:01Distribution SiteLocky
atlantaelectronics.co.id
199.241.184.10 (- United States)
2016-05-21 12:57Distribution SiteLocky
drunkenboyz.za.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-21 12:36Distribution SiteLocky
oftal.nichost.ru
RU-CENTER-RU (n/a)
2016-05-21 12:36Distribution SiteLocky
dreamfleet.ru
RU-CENTER-RU89.184.89.17 (- Ukraine)
2016-05-21 12:35Distribution SiteLocky
iflowershop.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
kraskileto.ru
REGRU-RU192.185.21.133 (- United States)
2016-05-21 12:35Distribution SiteLocky
enexp.ru
R01-RU81.177.135.62 (- Russian Federation)
2016-05-21 12:35Distribution SiteLocky
brokenheadaviaries.com.au
PlanetDomain104.18.52.145 (- United States) +1 A record(s) 104.18.53.145 (AS13335, - United States)
2016-05-21 12:35Distribution SiteLocky
blackdildo.net
ENOM, INC.69.64.147.39 (- United States)
2016-05-21 12:35Distribution SiteLocky
belautolux.ru
RU-CENTER-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
bk01.ru
RU-CENTER-RU95.181.171.67 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
capitolcollectibles.com
GODADDY.COM, LLC198.177.118.147 (- United States)
2016-05-21 12:34Distribution SiteLocky
a1.bbk.name
REGISTRAR OF DOMAIN NAMES REG.RU[...]185.93.108.17 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
president-school-online.ru
R01-RU217.107.34.3 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
ecocoolers.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:34Distribution SiteLocky
btservis.ru
RU-CENTER-RU37.228.94.130 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
forlifepatios.com.au
Web Address Registration43.241.54.247 (- Australia)
2016-05-21 12:33Distribution SiteLocky
tvs24m.ru
REGISTRATOR-RU (n/a)
2016-05-20 18:32Botnet C&CLocky
acbstypdrijslr.ru
NAUNET-RU31.41.44.21 (- Russian Federation)
2016-05-20 15:40Distribution SiteLocky
bundooraaccounting.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-20 15:40Distribution SiteLocky
bobbysinghwpg.com
GODADDY.COM, LLC192.186.246.98 (- United States)
2016-05-20 15:39Distribution SiteLocky
currimbhoys.com
NETWORK SOLUTIONS, LLC.74.208.236.132 (- United States)
2016-05-20 15:39Distribution SiteLocky
bilgoray.com
GODADDY.COM, LLC216.120.252.191 (- United States)
2016-05-20 15:39Distribution SiteLocky
www.flamingo-shop.eu
Vautron Rechenzentrum AG37.228.159.117 (- Germany)
2016-05-20 15:39Distribution SiteLocky
emilychoy.com
LAUNCHPAD.COM, INC.50.87.147.144 (- United States)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >