Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-25 08:48Distribution SiteLocky
baltela.lt
UAB "Interneto vizija"79.98.28.25 (- Lithuania)
2016-05-25 08:47Distribution SiteLocky
ontheblocks.com
ENOM, INC.69.64.147.35 (- United States)
2016-05-25 08:47Distribution SiteLocky
wikisecru.402.com1.ru
AGAVA-RU80.78.250.8 (- Russian Federation)
2016-05-25 08:47Distribution SiteLocky
yespos.co.uk
123-Reg Limited t/a 123-reg78.109.168.56 (- United Kingdom)
2016-05-25 08:47Distribution SiteLocky
angads.com.au
NetRegistry52.62.62.110 (- Australia)
2016-05-25 08:46Distribution SiteLocky
jerseyoffers.co.uk
Fasthosts Internet Ltd (n/a)
2016-05-25 02:57Botnet C&CDMALocker
95.213.192.77
95.213.192.77 (- Russian Federation)
2016-05-24 14:53Botnet C&CLocky
31.41.44.45
31.41.44.45 (- Russian Federation)
2016-05-24 10:47Distribution SiteLocky
protei.me
FastDomain Inc.192.124.249.159 (- United States)
2016-05-24 10:47Distribution SiteLocky
serwer1650017.home.pl
home.pl S.A. (n/a)
2016-05-24 10:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:46Distribution SiteLocky
aslfinance.eu
EXO TECHNOLOGIES spol. s r.o.92.240.253.72 (- Slovakia)
2016-05-24 06:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:03Distribution SiteLocky
mandoka.com
KEY-SYSTEMS GMBH176.9.172.190 (- Germany)
2016-05-24 06:03Distribution SiteLocky
freeflyers.com.au
VentraIP Wholesale43.241.54.246 (- Australia)
2016-05-24 05:23Distribution SiteLocky
shop.camacartigrafiche.com
ENOM, INC.185.81.1.19 (- Italy)
2016-05-23 17:22Distribution SiteLocky
fina-mente.com
UNITED-DOMAINS AG (n/a)
2016-05-23 17:02Botnet C&CLocky
92.63.87.53
92.63.87.53 (- Latvia)
2016-05-22 06:33Payment SiteTorrentLocker
stgg5jv6mqiibmax.torpice.li
(n/a)
2016-05-21 16:39Botnet C&CLocky
dtojlhpasjk.pw
Namecheap95.211.174.92 (- Netherlands)
2016-05-21 15:19Botnet C&CLocky
ytcijiooxdtlbevrh.info
Dynadot, LLC69.195.129.70 (- United States)
2016-05-21 14:16Distribution SiteLocky
serienplaner.com
KEY-SYSTEMS GMBH78.46.104.205 (- Germany)
2016-05-21 14:16Distribution SiteLocky
climairuk.com
LCN.COM LTD.85.118.237.109 (- United Kingdom)
2016-05-21 14:16Distribution SiteLocky
onlyher.nazwa.pl
nazwa.pl sp. z o.o.85.128.128.99 (- Poland)
2016-05-21 14:16Distribution SiteLocky
adestudio.w8w.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-21 14:16Distribution SiteLocky
cg.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
im-journal.com
TUCOWS DOMAINS INC. (n/a)
2016-05-21 14:16Distribution SiteLocky
cm.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
bailamecuba.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-21 14:16Distribution SiteLocky
btkdevelopment.ru
RU-CENTER-RU81.177.139.242 (- Russian Federation)
2016-05-21 14:16Distribution SiteLocky
aviainburo.com
INTERNET INVEST, LTD. DBA IMENA.[...]89.184.73.66 (- Ukraine)
2016-05-21 14:16Distribution SiteLocky
btcgroup.lgg.ru
R01-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
forrestsignsonline.com
GODADDY.COM, LLC192.124.249.10 (- United States)
2016-05-21 14:15Distribution SiteLocky
beautifulhosting.com.au
Web Address Registration (n/a)
2016-05-21 14:15Distribution SiteLocky
modaxxl.ro
ICI - ROTLD (n/a)
2016-05-21 14:15Distribution SiteLocky
www.minkssalon.com
WILD WEST DOMAINS, LLC50.63.66.195 (- United States)
2016-05-21 14:15Distribution SiteLocky
margohack.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-21 14:15Distribution SiteLocky
btc4kids.ru
RU-CENTER-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
www.imagewarp.com
ONLINENIC, INC.67.228.0.96 (- United States)
2016-05-21 14:15Distribution SiteLocky
aquapeel.ru
RU-CENTER-RU193.143.77.44 (- Poland)
2016-05-21 14:15Distribution SiteLocky
allergymachine.com
DREAMHOST, LLC (n/a)
2016-05-21 14:15Distribution SiteLocky
justicemandate.org
GoDaddy.com, LLC110.232.140.133 (- Australia)
2016-05-21 14:05Distribution SiteLocky
dubaifridays.com
GODADDY.COM, LLC51.254.139.63 (- France)
2016-05-21 14:04Distribution SiteLocky
blog.rotapost.ru
RU-CENTER-RU88.214.242.46 (- United Kingdom)
2016-05-21 13:24Botnet C&CLocky
149.154.159.179
149.154.159.179 (- Germany)
2016-05-21 13:24Botnet C&CLocky
95.46.114.80
95.46.114.80 (- Russian Federation)
2016-05-21 13:02Botnet C&CLocky
37.235.53.210
37.235.53.210 (- Spain)
2016-05-21 13:01Distribution SiteLocky
atlantaelectronics.co.id
199.241.184.10 (- Indonesia)
2016-05-21 12:57Distribution SiteLocky
drunkenboyz.za.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-21 12:36Distribution SiteLocky
oftal.nichost.ru
RU-CENTER-RU (n/a)
2016-05-21 12:36Distribution SiteLocky
dreamfleet.ru
RU-CENTER-RU89.184.89.17 (- Ukraine)
2016-05-21 12:35Distribution SiteLocky
iflowershop.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
kraskileto.ru
REGRU-RU192.185.21.133 (- United States)
2016-05-21 12:35Distribution SiteLocky
enexp.ru
R01-RU81.177.135.62 (- Russian Federation)
2016-05-21 12:35Distribution SiteLocky
brokenheadaviaries.com.au
PlanetDomain104.18.52.145 (- United States) +1 A record(s) 104.18.53.145 (AS13335, - United States)
2016-05-21 12:35Distribution SiteLocky
blackdildo.net
ENOM, INC. (n/a)
2016-05-21 12:35Distribution SiteLocky
belautolux.ru
RU-CENTER-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
bk01.ru
RU-CENTER-RU95.181.171.67 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
capitolcollectibles.com
GODADDY.COM, LLC198.177.118.147 (- United States)
2016-05-21 12:34Distribution SiteLocky
a1.bbk.name
REGISTRAR OF DOMAIN NAMES REG.RU[...]185.93.108.17 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
president-school-online.ru
R01-RU217.107.34.3 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
ecocoolers.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:34Distribution SiteLocky
btservis.ru
RU-CENTER-RU37.228.94.130 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
forlifepatios.com.au
Web Address Registration43.241.54.247 (- Australia)
2016-05-21 12:33Distribution SiteLocky
tvs24m.ru
REGISTRATOR-RU (n/a)
2016-05-20 18:32Botnet C&CLocky
acbstypdrijslr.ru
NAUNET-RU31.41.44.21 (- Russian Federation)
2016-05-20 15:40Distribution SiteLocky
bundooraaccounting.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-20 15:40Distribution SiteLocky
bobbysinghwpg.com
GODADDY.COM, LLC192.186.246.98 (- United States)
2016-05-20 15:39Distribution SiteLocky
currimbhoys.com
NETWORK SOLUTIONS, LLC.74.208.236.132 (- United States)
2016-05-20 15:39Distribution SiteLocky
bilgoray.com
GODADDY.COM, LLC216.120.252.191 (- United States)
2016-05-20 15:39Distribution SiteLocky
www.flamingo-shop.eu
Vautron Rechenzentrum AG37.228.159.117 (- Germany)
2016-05-20 15:39Distribution SiteLocky
emilychoy.com
LAUNCHPAD.COM, INC.50.87.147.144 (- United States)
2016-05-20 15:38Distribution SiteLocky
cameramartusa.info
GoDaddy.com, LLC (n/a)
2016-05-20 15:38Distribution SiteLocky
ayahstar.net.au
Synergy Wholesale Pty Ltd (n/a)
2016-05-20 15:38Distribution SiteLocky
euro-support.be
Combell nv176.62.167.160 (- Belgium)
2016-05-20 14:29Distribution SiteTorrentLocker
gettingmarried.ie
91.82.85.211 (- Hungary)
2016-05-20 14:29Distribution SiteTorrentLocker
linguistlounge.org
eNom, Inc.212.53.86.92 (- United Kingdom)
2016-05-20 12:02Botnet C&CLocky
178.63.238.185
178.63.238.185 (- Germany)
2016-05-20 11:19Distribution SiteLocky
immoclic.o2switch.net
ONLINE SAS (n/a)
2016-05-20 11:03Distribution SiteLocky
privatfunkagentur.taunus-media-online.de
217.175.246.77 (- Germany)
2016-05-20 11:03Distribution SiteLocky
cartomak.de
78.46.155.187 (- Germany)
2016-05-20 11:03Distribution SiteLocky
staffsolut.nichost.ru
RU-CENTER-RU195.208.1.102 (- Russian Federation)
2016-05-20 11:03Distribution SiteLocky
badaxx.za.pl
Consulting Service Sp. z o.o.193.203.99.112 (- Poland)
2016-05-20 11:03Distribution SiteLocky
mojeweselicho.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 11:03Distribution SiteLocky
posciele.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 11:03Distribution SiteLocky
tzr.grejt.pl
Consulting Service Sp. z o.o.193.203.99.114 (- Poland)
2016-05-20 11:03Distribution SiteLocky
imetinyang.za.pl
Consulting Service Sp. z o.o.193.203.99.111 (- Poland)
2016-05-20 11:03Distribution SiteLocky
toplista.xonx.pl
Consulting Service Sp. z o.o.193.203.99.114 (- Poland)
2016-05-20 11:02Distribution SiteLocky
perspektywa2012.za.pl
Consulting Service Sp. z o.o.193.203.99.113 (- Poland)
2016-05-20 10:26Distribution SiteLocky
dugoutdad.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-05-20 10:26Distribution SiteLocky
babamal.com
GODADDY.COM, LLC195.154.34.18 (- France)
2016-05-20 10:26Distribution SiteLocky
forshawssalads.co.uk
123-Reg Limited t/a 123-reg85.118.237.109 (- United Kingdom)
2016-05-20 10:26Distribution SiteLocky
craftbeerventures.nl
E-nom Inc79.170.89.196 (- Netherlands)
2016-05-20 10:26Distribution SiteLocky
dev.hartis.org
Name.com, LLC212.1.208.141 (- United States)
2016-05-20 10:05Botnet C&CLocky
138.201.118.102
138.201.118.102 (- Germany)
2016-05-20 09:49Botnet C&CLocky
51.254.240.89
51.254.240.89 (- France)
2016-05-20 08:44Botnet C&CLocky
91.219.29.106
91.219.29.106 (- Ukraine)
2016-05-20 07:38Botnet C&CLocky
bkdjvmmkwgkvgw.su
NAUNET-REG-FID91.219.31.14 (- Russian Federation)
2016-05-20 05:25Distribution SiteLocky
bpspl.co.in
Webiq Domains Solutions Pvt. Ltd[...]144.76.114.198 (- Germany)
2016-05-19 21:09Botnet C&CLocky
hppfsslyeyseudg.biz
BIZCN.COM, INC.51.254.240.89 (- France)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >