Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-27 12:39Distribution SiteLocky
gc-hubbelrath.server1.hostingforyou.de
82.197.153.12 (- Germany)
2016-05-27 12:37Distribution SiteLocky
98.131.20.17
(n/a)
2016-05-27 11:02Distribution SiteLocky
egadget.ru
RU-CENTER-RU (n/a)
2016-05-27 11:02Distribution SiteLocky
cobrebactericida.org
Network Solutions, LLC (n/a)
2016-05-27 11:01Distribution SiteLocky
www.samrhamburg.com
MELBOURNE IT, LTD. D/B/A INTERNE[...] (n/a)
2016-05-27 11:01Distribution SiteLocky
wondervalley.in
Rediff.com India Limited (R37-AF[...]166.62.10.183 (- United States)
2016-05-27 11:01Distribution SiteLocky
bridgeplacements.com
NETWORK SOLUTIONS, LLC.204.11.56.48 (- Virgin Islands)
2016-05-27 11:01Distribution SiteLocky
www.orchidealito.it
AEMCOM-REG81.88.224.155 (- Italy)
2016-05-27 11:01Distribution SiteLocky
birlesimsucuklari.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-05-27 11:01Distribution SiteLocky
acnek.com
GODADDY.COM, LLC160.153.90.134 (- United States)
2016-05-27 11:01Distribution SiteLocky
iwebmediasavvy.com
GODADDY.COM, LLC63.77.93.12 (- United States)
2016-05-27 11:01Distribution SiteLocky
greenwfms.com
FASTDOMAIN, INC.67.222.62.22 (- United States)
2016-05-27 11:01Distribution SiteLocky
www.ding-a-ling-tel.com
NETWORK SOLUTIONS, LLC.216.55.149.9 (- United States)
2016-05-27 11:01Distribution SiteLocky
projectodetalhe.pt
185.31.159.113 (- Portugal)
2016-05-27 10:28Distribution SiteLocky
ecpi.ro
Romarg SRL89.42.223.64 (- Romania)
2016-05-27 07:05Distribution SiteLocky
peptide-manufacturer.com
HICHINA ZHICHENG TECHNOLOGY LTD.104.238.101.139 (- United States)
2016-05-27 05:41Distribution SiteLocky
takibutaki.com
AEROTEK BILISIM SANAYI VE TICARE[...]109.232.217.81 (- Turkey)
2016-05-26 18:25Botnet C&CLocky
212.109.219.31
212.109.219.31 (- Russian Federation)
2016-05-26 07:59Botnet C&CLocky
104.131.182.103
104.131.182.103 (- United States)
2016-05-26 07:40Botnet C&CLocky
164.132.40.47
164.132.40.47 (- France)
2016-05-26 06:21Distribution SiteLocky
cdgame.kgb.pl
Consulting Service Sp. z o.o.195.114.0.64 (- Poland)
2016-05-26 06:21Distribution SiteLocky
birlesimsucuklari.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-05-26 06:21Distribution SiteLocky
equalityindonesia.com
CV. JOGJACAMP202.52.146.56 (- Indonesia)
2016-05-26 06:21Distribution SiteLocky
selonija.lv
188.166.202.229 (- Netherlands)
2016-05-26 06:21Distribution SiteLocky
iwebmediasavvy.com
GODADDY.COM, LLC63.77.93.12 (- United States)
2016-05-26 06:21Distribution SiteLocky
hate-metal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.9.13.83 (- Germany)
2016-05-26 06:21Distribution SiteLocky
colleenthestylist.com
GODADDY.COM, LLC107.180.46.143 (- United States)
2016-05-26 06:21Distribution SiteLocky
www.broxlab.com
TLD REGISTRAR SOLUTIONS LTD104.28.14.71 (- United States) +1 A record(s) 104.28.15.71 (AS13335, - United States)
2016-05-26 06:21Distribution SiteLocky
apelecomp.com
REALTIME REGISTER BV45.33.9.234 (- United States)
2016-05-26 06:20Distribution SiteLocky
humanoit.hu
195.56.148.160 (- Hungary)
2016-05-26 06:20Distribution SiteLocky
majaz.co.uk
Easy Internet Solutions Ltd81.27.85.11 (- United Kingdom)
2016-05-26 06:20Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-05-26 06:20Distribution SiteLocky
edupei.com.mx
Hospedando.Com.Mx67.227.236.71 (- United States)
2016-05-26 06:20Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-26 06:20Distribution SiteLocky
tspipp.tsu.tula.ru
REGRU-RU85.142.133.41 (- Russian Federation)
2016-05-26 06:20Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-25 18:30Botnet C&CLocky
188.166.168.250
188.166.168.250 (- United Kingdom)
2016-05-25 17:49Botnet C&CLocky
138.201.93.46
138.201.93.46 (- Germany)
2016-05-25 14:38Payment SiteTorrentLocker
de2nuvwegoo32oqv.torworks.li
(n/a)
2016-05-25 14:01Distribution SiteLocky
selonija.lv
188.166.202.229 (- Netherlands)
2016-05-25 14:01Distribution SiteLocky
smp.com.mx
Hospedando.Com.Mx67.227.172.16 (- United States)
2016-05-25 14:00Distribution SiteLocky
comecomunicare.eu
Aruba S.p.A.62.149.128.151 (- Italy) +7 A record(s) 62.149.128.154 (AS31034, - Italy)
62.149.128.157 (AS31034, - Italy)
62.149.128.160 (AS31034, - Italy)
62.149.128.163 (AS31034, - Italy)
62.149.128.166 (AS31034, - Italy)
62.149.128.72 (AS31034, - Italy)
62.149.128.74 (AS31034, - Italy)
2016-05-25 14:00Distribution SiteLocky
orobos.nyc
GoDaddy.com, Inc.181.224.137.76 (- Panama)
2016-05-25 14:00Distribution SiteLocky
lifeclinics.net
GODADDY.COM, LLC213.158.187.41 (- Egypt)
2016-05-25 14:00Distribution SiteLocky
www.appoutpost.com
GODADDY.COM, LLC67.225.146.147 (- United States)
2016-05-25 14:00Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-05-25 14:00Distribution SiteLocky
tspipp.tsu.tula.ru
REGRU-RU85.142.133.41 (- Russian Federation)
2016-05-25 14:00Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-25 14:00Distribution SiteLocky
digitacaoveloz.com.br
191.252.51.6 (- Brazil)
2016-05-25 14:00Distribution SiteLocky
bankruptcymag.com
MONIKER ONLINE SERVICES LLC45.33.9.234 (- United States)
2016-05-25 14:00Distribution SiteLocky
globalcredithub.com
LAUNCHPAD.COM, INC.107.180.27.233 (- United States)
2016-05-25 14:00Distribution SiteLocky
crimeshurt.com
GODADDY.COM, LLC192.186.240.68 (- United States)
2016-05-25 14:00Distribution SiteLocky
unijovem.com.br
191.252.4.25 (- Brazil)
2016-05-25 14:00Distribution SiteLocky
brunohenrique.net
ENOM, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
avayeparseh.com
ONLINENIC, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
osdc.eu
GANDI195.230.19.15 (- Bulgaria)
2016-05-25 12:01Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC104.18.42.43 (- United States) +1 A record(s) 104.18.43.43 (AS13335, - United States)
2016-05-25 12:01Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV67.205.123.143 (- Canada)
2016-05-25 12:01Distribution SiteLocky
wisebuy.com
GODADDY.COM, LLC97.74.85.102 (- United States)
2016-05-25 12:01Distribution SiteLocky
amazoo.com.br
187.17.111.98 (- Brazil)
2016-05-25 12:01Distribution SiteLocky
jett.com
GODADDY.COM, LLC97.74.85.102 (- United States)
2016-05-25 12:01Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
onestopcableshop.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 12:00Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC104.18.42.43 (- United States) +1 A record(s) 104.18.43.43 (AS13335, - United States)
2016-05-25 12:00Distribution SiteLocky
osdc.eu
GANDI195.230.19.15 (- Bulgaria)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 12:00Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV67.205.123.143 (- Canada)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD0.0.0.0 (n/a)
2016-05-25 10:44Distribution SiteLocky
rsxxx.com
DNC HOLDINGS, INC.69.50.139.6 (- United States)
2016-05-25 10:44Distribution SiteLocky
domyzbali-roztocze.pl
Consulting Service Sp. z o.o.188.116.19.98 (- Poland)
2016-05-25 09:04Botnet C&CDMALocker
5.8.63.54
5.8.63.54 (- United States)
2016-05-25 08:48Distribution SiteLocky
italianshoemanufacturers.com
GODADDY.COM, LLC52.15.135.111 (- United States)
2016-05-25 08:48Distribution SiteLocky
baltela.lt
UAB "Interneto vizija"79.98.28.25 (- Lithuania)
2016-05-25 08:47Distribution SiteLocky
ontheblocks.com
ENOM, INC.69.64.147.35 (- United States)
2016-05-25 08:47Distribution SiteLocky
wikisecru.402.com1.ru
AGAVA-RU80.78.250.8 (- Russian Federation)
2016-05-25 08:47Distribution SiteLocky
yespos.co.uk
123-Reg Limited t/a 123-reg78.109.168.56 (- United Kingdom)
2016-05-25 08:47Distribution SiteLocky
angads.com.au
NetRegistry52.62.62.110 (- Australia)
2016-05-25 08:46Distribution SiteLocky
jerseyoffers.co.uk
Fasthosts Internet Ltd (n/a)
2016-05-25 02:57Botnet C&CDMALocker
95.213.192.77
95.213.192.77 (- Russian Federation)
2016-05-24 14:53Botnet C&CLocky
31.41.44.45
31.41.44.45 (- Russian Federation)
2016-05-24 10:47Distribution SiteLocky
protei.me
FastDomain Inc.192.124.249.159 (- United States)
2016-05-24 10:47Distribution SiteLocky
serwer1650017.home.pl
home.pl S.A. (n/a)
2016-05-24 10:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:46Distribution SiteLocky
aslfinance.eu
EXO TECHNOLOGIES spol. s r.o.92.240.253.72 (- Slovakia)
2016-05-24 06:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:03Distribution SiteLocky
mandoka.com
KEY-SYSTEMS GMBH176.9.172.190 (- Germany)
2016-05-24 06:03Distribution SiteLocky
freeflyers.com.au
VentraIP Wholesale43.241.54.246 (- Australia)
2016-05-24 05:23Distribution SiteLocky
shop.camacartigrafiche.com
ENOM, INC.185.81.1.19 (- Italy)
2016-05-23 17:22Distribution SiteLocky
fina-mente.com
UNITED-DOMAINS AG (n/a)
2016-05-23 17:02Botnet C&CLocky
92.63.87.53
92.63.87.53 (- Latvia)
2016-05-22 06:33Payment SiteTorrentLocker
stgg5jv6mqiibmax.torpice.li
(n/a)
2016-05-21 16:39Botnet C&CLocky
dtojlhpasjk.pw
Namecheap95.211.174.92 (- Netherlands)
2016-05-21 15:19Botnet C&CLocky
ytcijiooxdtlbevrh.info
Dynadot, LLC69.195.129.70 (- United States)
2016-05-21 14:16Distribution SiteLocky
serienplaner.com
KEY-SYSTEMS GMBH78.46.104.205 (- Germany)
2016-05-21 14:16Distribution SiteLocky
climairuk.com
LCN.COM LTD.85.118.237.109 (- United Kingdom)
2016-05-21 14:16Distribution SiteLocky
onlyher.nazwa.pl
nazwa.pl sp. z o.o.85.128.128.99 (- Poland)
2016-05-21 14:16Distribution SiteLocky
adestudio.w8w.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-21 14:16Distribution SiteLocky
cg.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
im-journal.com
TUCOWS DOMAINS INC. (n/a)

# of rows displayed: 100
# of entries in database: 12'877

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >