Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-20 15:38Distribution SiteLocky
cameramartusa.info
GoDaddy.com, LLC (n/a)
2016-05-20 15:38Distribution SiteLocky
ayahstar.net.au
Synergy Wholesale Pty Ltd (n/a)
2016-05-20 15:38Distribution SiteLocky
euro-support.be
Combell nv176.62.167.160 (- Belgium)
2016-05-20 14:29Distribution SiteTorrentLocker
gettingmarried.ie
91.82.85.211 (- Hungary)
2016-05-20 14:29Distribution SiteTorrentLocker
linguistlounge.org
eNom, Inc.212.53.86.92 (- United Kingdom)
2016-05-20 12:02Botnet C&CLocky
178.63.238.185
178.63.238.185 (- Germany)
2016-05-20 11:19Distribution SiteLocky
immoclic.o2switch.net
ONLINE SAS (n/a)
2016-05-20 11:03Distribution SiteLocky
privatfunkagentur.taunus-media-online.de
217.175.246.77 (- Germany)
2016-05-20 11:03Distribution SiteLocky
cartomak.de
78.46.155.187 (- Germany)
2016-05-20 11:03Distribution SiteLocky
staffsolut.nichost.ru
RU-CENTER-RU195.208.1.102 (- Russian Federation)
2016-05-20 11:03Distribution SiteLocky
badaxx.za.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-20 11:03Distribution SiteLocky
mojeweselicho.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 11:03Distribution SiteLocky
posciele.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 11:03Distribution SiteLocky
tzr.grejt.pl
Consulting Service Sp. z o.o.193.203.99.114 (- Poland)
2016-05-20 11:03Distribution SiteLocky
imetinyang.za.pl
Consulting Service Sp. z o.o.193.203.99.111 (- Poland)
2016-05-20 11:03Distribution SiteLocky
toplista.xonx.pl
Consulting Service Sp. z o.o.193.203.99.114 (- Poland)
2016-05-20 11:02Distribution SiteLocky
perspektywa2012.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 10:26Distribution SiteLocky
dugoutdad.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-05-20 10:26Distribution SiteLocky
babamal.com
GODADDY.COM, LLC195.154.34.18 (- France)
2016-05-20 10:26Distribution SiteLocky
forshawssalads.co.uk
123-Reg Limited t/a 123-reg85.118.237.109 (- United Kingdom)
2016-05-20 10:26Distribution SiteLocky
craftbeerventures.nl
E-nom Inc79.170.89.196 (- Netherlands)
2016-05-20 10:26Distribution SiteLocky
dev.hartis.org
Name.com, LLC212.1.208.141 (- United States)
2016-05-20 10:05Botnet C&CLocky
138.201.118.102
138.201.118.102 (- Germany)
2016-05-20 09:49Botnet C&CLocky
51.254.240.89
51.254.240.89 (- France)
2016-05-20 08:44Botnet C&CLocky
91.219.29.106
91.219.29.106 (- Ukraine)
2016-05-20 07:38Botnet C&CLocky
bkdjvmmkwgkvgw.su
NAUNET-REG-FID91.219.31.14 (- Ukraine)
2016-05-20 05:25Distribution SiteLocky
bpspl.co.in
Webiq Domains Solutions Pvt. Ltd[...]144.76.114.198 (- Germany)
2016-05-19 21:09Botnet C&CLocky
hppfsslyeyseudg.biz
BIZCN.COM, INC.51.254.240.89 (- France)
2016-05-19 17:18Distribution SiteLocky
www.barsracing.com
ENOM, INC.68.171.223.171 (- United States)
2016-05-19 15:03Distribution SiteLocky
kamiltyrcha.aq.pl
Consulting Service Sp. z o.o.193.203.99.115 (- Poland)
2016-05-19 14:00Distribution SiteLocky
usterkiwloclawek.za.pl
Consulting Service Sp. z o.o.193.203.99.114 (- Poland)
2016-05-19 12:53Distribution SiteLocky
kemper-inter.net
UNITED-DOMAINS AG109.237.133.204 (- Germany)
2016-05-19 10:01Botnet C&CLocky
92.63.87.48
92.63.87.48 (- Latvia)
2016-05-19 09:16Botnet C&CLocky
193.9.28.16
193.9.28.16 (- United States)
2016-05-19 08:16Distribution SiteLocky
genius-versand.de
85.13.154.152 (- Germany)
2016-05-19 08:16Distribution SiteLocky
oavb.com
TUCOWS DOMAINS INC.216.97.224.210 (- United States)
2016-05-19 08:16Distribution SiteLocky
themathwebsite.com
TUCOWS DOMAINS INC.168.144.248.40 (- Canada)
2016-05-19 08:16Distribution SiteLocky
www.barth-sanitaer.de
81.169.145.93 (- Germany)
2016-05-19 08:16Distribution SiteLocky
gc-hubbelrath.server1.hostingforyou.de
82.197.153.12 (- Germany)
2016-05-19 08:15Distribution SiteLocky
vantagenetsvc.com
GODADDY.COM, LLC43.255.154.124 (- Singapore)
2016-05-19 08:15Distribution SiteLocky
teplar.ru
REGTIME-RU127.0.0.1 (n/a)
2016-05-19 08:05Botnet C&CLocky
109.234.35.123
109.234.35.123 (- Russian Federation)
2016-05-19 07:52Distribution SiteLocky
drevstan.ru
REGRU-RU185.26.122.41 (- Russian Federation)
2016-05-19 07:40Distribution SiteLocky
www.briarhurst.org
Tucows Inc.66.199.168.4 (- Canada)
2016-05-19 07:03Distribution SiteLocky
itc.slav.dn.ua
193.228.2.3 (- Ukraine)
2016-05-19 06:49Distribution SiteLocky
clubrotor.ru
RU-CENTER-RU89.111.179.102 (- Russian Federation)
2016-05-18 09:36Payment SiteTorrentLocker
de2nuvwegoo32oqv.torspaces.li
(n/a)
2016-05-18 08:28Distribution SiteLocky
racedayworld.com
NETWORK SOLUTIONS, LLC.52.71.37.165 (- United States)
2016-05-18 07:37Payment SiteTorrentLocker
de2nuvwegoo32oqv.torbook.li
(n/a)
2016-05-18 07:04Distribution SiteLocky
enormail.eu
Registrar.eu109.237.216.216 (- Netherlands)
2016-05-18 06:55Botnet C&CLocky
78.47.159.97
78.47.159.97 (- Germany)
2016-05-18 06:52Distribution SiteLocky
boonstoppel.info
Hosting Concepts B.V. dba Openpr[...]128.140.219.133 (- Netherlands)
2016-05-18 06:21Distribution SiteLocky
79.96.153.93
(n/a)
2016-05-18 06:07Distribution SiteLocky
depaardestal.nl
One.com A/S46.30.213.90 (- Denmark)
2016-05-18 05:27Distribution SiteLocky
allmp3.hostil.pl
OVH SAS87.98.236.134 (- Poland)
2016-05-18 05:10Distribution SiteLocky
drive-mir.ru
RU-CENTER-RU85.93.145.137 (- Russian Federation)
2016-05-17 20:13Botnet C&CLocky
93.170.169.52
93.170.169.52 (- Czech Republic)
2016-05-17 14:17Botnet C&CLocky
217.12.199.151
217.12.199.151 (- Ukraine)
2016-05-17 14:02Distribution SiteLocky
katyco.net
NAME.COM, INC.203.162.53.112 (- Vietnam)
2016-05-17 13:10Distribution SiteLocky
fuji-mig.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]93.190.41.97 (- Ukraine)
2016-05-17 12:57Distribution SiteLocky
abantuvisions.com
ENOM, INC.192.185.90.154 (- United States)
2016-05-17 12:45Distribution SiteLocky
clerici.info
Ascio Technologies, Inc. Danmark[...]213.205.38.24 (- Italy)
2016-05-17 12:40Distribution SiteLocky
pocketfullofpoems.com
GO CHINA DOMAINS, LLC198.57.247.142 (- United States)
2016-05-17 12:38Distribution SiteLocky
apotekroxy.com
TUCOWS DOMAINS INC.103.229.72.22 (- Indonesia)
2016-05-17 08:18Distribution SiteLocky
jasoncoroy.com
ENOM, INC.104.24.106.100 (- United States) +1 A record(s) 104.24.107.100 (AS13335, - United States)
2016-05-17 07:24Distribution SiteLocky
kabif.org.uk
Promo People, Inc. (n/a)
2016-05-17 07:23Distribution SiteLocky
fundacionbraun.com
NETWORK SOLUTIONS, LLC.200.63.97.220 (- Chile)
2016-05-17 07:21Distribution SiteLocky
sevvalsenturk.com
ENOM, INC. (n/a)
2016-05-17 07:21Distribution SiteLocky
uwzorg.info
Key-Systems GmbH89.105.197.30 (- Netherlands)
2016-05-17 06:09Distribution SiteLocky
simplesourcehr.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-05-17 06:09Distribution SiteLocky
sexlandia.ru
REGRU-RU194.58.112.165 (- Russian Federation)
2016-05-17 06:09Distribution SiteLocky
no-id.eu
CSL GmbH Computer Service Langen[...]83.137.194.81 (- Netherlands)
2016-05-17 06:09Distribution SiteLocky
pasadenaoffice.com
REGISTER.COM, INC. (n/a)
2016-05-17 06:06Distribution SiteLocky
www.wellsigns.com
NETWORK SOLUTIONS, LLC.195.8.66.1 (- United Kingdom)
2016-05-17 05:36Distribution SiteLocky
zarya-ua.com.ua
ua.ukraine185.68.16.203 (- Ukraine)
2016-05-17 00:33Botnet C&CLocky
dqtfhkgskushlum.org
Dynadot, LLC69.195.129.70 (- United States)
2016-05-17 00:23Botnet C&CLocky
31.184.197.72
31.184.197.72 (- Russian Federation)
2016-05-17 00:23Botnet C&CLocky
188.127.231.124
188.127.231.124 (- Russian Federation)
2016-05-17 00:23Botnet C&CLocky
176.53.21.105
176.53.21.105 (- Turkey)
2016-05-17 00:23Botnet C&CLocky
149.202.109.202
149.202.109.202 (- France)
2016-05-16 14:31Distribution SiteLocky
12hourenergy.com.au
Web Address Registration (n/a)
2016-05-16 14:30Distribution SiteLocky
nacirembalagens.com.br
177.185.192.143 (- Brazil)
2016-05-16 14:30Distribution SiteLocky
foundationapparelco.com
GODADDY.COM, LLC (n/a)
2016-05-16 14:30Distribution SiteLocky
alynshy.com
GODADDY.COM, LLC166.62.28.145 (- United States)
2016-05-16 14:30Distribution SiteLocky
athleticmmagear.com
REGISTER.COM, INC.50.87.145.77 (- United States)
2016-05-16 14:29Distribution SiteLocky
philippinesregalo.com
NAMESILO, LLC (n/a)
2016-05-16 14:28Distribution SiteLocky
renklitatlar.com
TUCOWS DOMAINS INC.46.235.11.61 (- Turkey)
2016-05-16 14:27Distribution SiteLocky
myeventincentives.com
FASTDOMAIN, INC. (n/a)
2016-05-16 14:27Distribution SiteLocky
truesafetygear.ca
Go Daddy Domains Canada, Inc107.154.159.180 (- United States) +1 A record(s) 107.154.166.180 (AS19551, - United States)
2016-05-16 14:27Distribution SiteLocky
medihometown-usa.com
GODADDY.COM, LLC (n/a)
2016-05-16 14:26Distribution SiteLocky
mintbymelm.com
GODADDY.COM, LLC103.11.191.51 (- Singapore)
2016-05-16 14:26Distribution SiteLocky
soldabarra.com.br
159.203.75.88 (- United States)
2016-05-16 14:26Distribution SiteLocky
uggforever.com.au
Web Address Registration (n/a)
2016-05-16 14:14Distribution SiteLocky
visionpharmapk.com
GODADDY.COM, LLC203.124.44.33 (- Pakistan)
2016-05-16 14:14Distribution SiteLocky
tafeta.ca
SIBERNAME INTERNET AND SOFTWARE [...]209.44.101.146 (- Canada)
2016-05-16 14:14Distribution SiteLocky
sunlite.com.au
TPP Wholesale Pty Ltd54.252.105.221 (- Australia)
2016-05-16 14:13Distribution SiteLocky
scpremiumbikes.com
TUCOWS DOMAINS INC.103.6.198.138 (- Malaysia)
2016-05-16 14:13Distribution SiteLocky
optimus-communication.com
GODADDY.COM, LLC23.229.166.35 (- United States)
2016-05-16 14:13Distribution SiteLocky
neophrontech.com
GODADDY.COM, LLC45.113.122.172 (- India)
2016-05-16 14:13Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM192.186.222.166 (- United States)

# of rows displayed: 100
# of entries in database: 12'829

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >