Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-14 11:52Distribution SiteLocky
giftoflife.nl
Registrar.eu181.224.130.230 (- Panama)
2016-12-14 11:52Distribution SiteLocky
new.craescuela.net
INTERDOMINIOS, INC. (n/a)
2016-12-14 11:52Distribution SiteLocky
dicksmacker.com
GODADDY.COM, LLC184.168.221.40 (- United States)
2016-12-14 11:52Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.45.56.216.10 (- Canada)
2016-12-14 11:51Distribution SiteLocky
leonsi.eu
Tucows.com Co.198.58.93.20 (- United States)
2016-12-14 11:51Distribution SiteLocky
lucapotenziani.com
TUCOWS DOMAINS INC.82.223.67.107 (- Spain)
2016-12-14 11:51Distribution SiteLocky
mintthaicafe.com
1&1 INTERNET SE74.208.113.182 (- United States)
2016-12-14 11:51Distribution SiteLocky
gizlot.com
GODADDY.COM, LLC198.58.93.20 (- United States)
2016-12-14 11:51Distribution SiteLocky
e-pin.gr
(n/a)
2016-12-14 11:51Distribution SiteLocky
tocotrucking.com
NETWORK SOLUTIONS, LLC.50.87.121.237 (- United States)
2016-12-14 11:50Distribution SiteLocky
akkugarancia.hu
195.56.148.225 (- Hungary)
2016-12-14 11:50Distribution SiteLocky
mijnknwu.knwu.nl
Cloud VPS B.V.85.222.230.49 (- Netherlands)
2016-12-14 11:50Distribution SiteLocky
demo.pornuha4you.com
DOMAINCONTEXT, INC. (n/a)
2016-12-14 11:50Distribution SiteLocky
safataj.ir
185.94.99.114 (- Iran)
2016-12-14 11:50Distribution SiteLocky
nordvelay.fr
NUXIT (n/a)
2016-12-14 11:50Distribution SiteLocky
ypgg.kr
119.30.138.158 (- Korea)
2016-12-14 11:49Distribution SiteLocky
urachart.com
ONLINENIC, INC.203.170.192.184 (- Thailand)
2016-12-14 11:49Distribution SiteLocky
obccllc.com
GODADDY.COM, LLC66.191.108.110 (- United States)
2016-12-14 11:49Distribution SiteLocky
aria-asp.ir
185.23.130.3 (- Iran)
2016-12-14 11:49Distribution SiteLocky
176.58.124.197
n/a
2016-12-14 11:49Distribution SiteLocky
shop.cxweixin.cn
Beijing New Net Digital Informat[...]220.165.143.26 (- China)
2016-12-14 11:48Distribution SiteLocky
autozirkus.com
ENOM, INC. (n/a)
2016-12-14 11:48Distribution SiteLocky
angermeir.de
85.214.146.249 (- Germany)
2016-12-14 11:48Distribution SiteLocky
camschlampen.notgeile-amateure.com
ENOM, INC.192.64.119.254 (- United States)
2016-12-14 11:48Distribution SiteLocky
dochalupy.com
GRANSY S.R.O D/B/A SUBREG.CZ77.78.104.100 (- Czech Republic)
2016-12-14 11:48Distribution SiteLocky
ziskant.com
CENTER OF UKRAINIAN INTERNET NAM[...]62.210.89.38 (- France)
2016-12-14 11:48Distribution SiteLocky
aeroptim.com
ENOM, INC.109.234.161.45 (- France)
2016-12-14 11:48Distribution SiteLocky
eflengu.ru
RU-CENTER-RU85.12.197.79 (- Russian Federation)
2016-12-14 11:47Distribution SiteLocky
houssiere.daniel.formations-web.alsace
GANDI195.154.173.226 (- France)
2016-12-14 11:47Distribution SiteLocky
evolutionseries.com
NETREGISTRY PTY. LTD.65.99.228.32 (- United States)
2016-12-14 11:47Distribution SiteLocky
seven-cards.com
REALTIME REGISTER BV148.251.128.243 (- Germany)
2016-12-14 11:47Distribution SiteLocky
www.socialmediaplanner.com.au
GoDaddy.com, LLC74.124.217.136 (- United States)
2016-12-14 11:47Distribution SiteLocky
sahara-prof.ru
REGRU-RU164.132.227.255 (- France)
2016-12-14 11:47Distribution SiteLocky
yaeliloni.com
LIQUIDNET LTD. (n/a)
2016-12-14 11:47Distribution SiteLocky
tunca.bel.tr
94.102.7.199 (- Turkey)
2016-12-14 11:47Distribution SiteLocky
design-travel.ru
R01-RU92.53.96.89 (- Russian Federation)
2016-12-14 11:47Distribution SiteLocky
ayvalik.info.tr
188.125.164.2 (- Turkey)
2016-12-14 11:46Distribution SiteLocky
www.olgiatalife.it
OMNIBUS-REG (n/a)
2016-12-14 11:46Distribution SiteLocky
zhongguanjiaoshi.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.133.42 (- China)
2016-12-14 11:46Distribution SiteLocky
dux.baidu.com
BEIJING INNOVATIVE LINKAGE TECHN[...]180.76.189.110 (- China)
2016-12-14 11:45Distribution SiteLocky
eastoncorporatefinance.com
1&1 INTERNET SE217.160.231.206 (- Germany)
2016-12-14 11:45Distribution SiteLocky
xlraider.com
1&1 INTERNET SE (n/a)
2016-12-14 11:45Distribution SiteLocky
gandalfoli.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]46.30.213.154 (- Denmark)
2016-12-14 11:45Distribution SiteLocky
dongiberson.com
GODADDY.COM, LLC69.90.66.190 (- United States)
2016-12-14 11:45Distribution SiteLocky
upperclassmeninc.com
GODADDY.COM, LLC192.138.189.66 (- United States)
2016-12-14 11:45Distribution SiteLocky
pizzatr.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-12-14 11:45Distribution SiteLocky
eor.ir
185.2.12.70 (- Iran)
2016-12-14 11:45Distribution SiteLocky
s98405.gridserver.com
GODADDY.COM, LLC205.186.183.145 (- United States)
2016-12-14 11:44Distribution SiteLocky
ustadhanif.com
ENOM, INC.208.75.151.108 (- United States)
2016-12-14 11:44Distribution SiteLocky
meatthetruth.ru
REGRU-RU (n/a)
2016-12-14 11:44Distribution SiteLocky
www.kottalgenealogy.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.28.0.125 (- United States) +1 A record(s) 104.28.1.125 (AS13335, - United States)
2016-12-14 11:44Distribution SiteLocky
gm-werbekonzepte.de
62.113.207.70 (- Germany)
2016-12-14 11:44Distribution SiteLocky
www.konfidence.pl
home.pl S.A.62.129.233.222 (- Poland)
2016-12-14 11:44Distribution SiteLocky
infinitecorp.ca
Go Daddy Domains Canada, Inc199.116.216.169 (- Canada)
2016-12-14 11:44Distribution SiteLocky
yoga.tanialove.com
TUCOWS DOMAINS INC.144.208.71.160 (- United States)
2016-12-14 11:44Distribution SiteLocky
oldenburgertransport.com
MIJN INTERNETOPLOSSING B.V.181.224.135.62 (- Panama)
2016-12-14 11:44Distribution SiteLocky
theexcelconsultant.com
PROMO PEOPLE, INC.65.39.193.50 (- United States)
2016-12-14 11:44Distribution SiteLocky
whutszk.com
DOMAIN.COM, LLC72.52.4.120 (- United States)
2016-12-14 11:44Distribution SiteLocky
ospkrutyn.pl
Active 24 sp. z o.o.195.78.66.207 (- Poland)
2016-12-14 11:43Distribution SiteLocky
dtburakakin.com
TUCOWS DOMAINS INC.95.85.46.136 (- Netherlands)
2016-12-14 11:43Distribution SiteLocky
swanseabaptistchurch.org
FastDomain Inc.23.236.62.147 (- United States)
2016-12-14 11:43Distribution SiteLocky
allan.multimediedesignerskive.dk
212.97.132.126 (- Denmark)
2016-12-14 11:43Distribution SiteLocky
mbdvacations.com
WILD WEST DOMAINS, LLC199.116.78.152 (- United States)
2016-12-14 11:43Distribution SiteLocky
decouer.com
GO CANADA DOMAINS, LLC162.252.105.157 (- United States)
2016-12-14 11:42Distribution SiteLocky
johndada.se
NETIM (n/a)
2016-12-14 11:42Distribution SiteLocky
028cdxyk.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.89.58.141 (- Hong Kong)
2016-12-14 11:42Distribution SiteLocky
lanehmontgomery.com
GODADDY.COM, LLC77.104.157.97 (- United States)
2016-12-14 11:42Distribution SiteLocky
dealspari.com
REBEL.COM CORP.172.99.89.235 (- United States)
2016-12-14 11:42Distribution SiteLocky
pwdhash.com
1&1 INTERNET SE74.208.92.55 (- United States)
2016-12-14 10:03Botnet C&CLocky
185.117.72.105
185.117.72.105 (- Netherlands)
2016-12-14 00:37Payment SiteCerber
avsxrcoq2q5fgrw2.p93w1x.bid
Eranet International Limited (n/a)
2016-12-13 21:48Distribution SiteLocky
netkeycompany.com
ERANET INTERNATIONAL LIMITED104.27.128.185 (- United States)
2016-12-13 21:48Distribution SiteLocky
angeluna.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.48 (- United States)
2016-12-13 21:47Distribution SiteLocky
swivelsrus.com
DOMAINPEOPLE, INC.64.41.88.104 (- United States)
2016-12-13 21:47Distribution SiteLocky
hikodge.zashiki.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-12-13 21:47Distribution SiteLocky
markanltd.com
DOMAIN.COM, LLC212.175.247.30 (- Turkey)
2016-12-13 21:47Distribution SiteLocky
kdeleener.dommel.be
SCHEDOM NV / DOMMEL.COM193.109.184.81 (- Belgium)
2016-12-13 21:47Distribution SiteLocky
dl.sevenseals.ru
RU-CENTER-RU77.221.140.226 (- Russian Federation)
2016-12-13 21:47Distribution SiteLocky
stickersdes.org
Todaynic.com, Inc. (n/a)
2016-12-13 21:47Distribution SiteLocky
stickersdes.org
Todaynic.com, Inc. (n/a)
2016-12-13 21:46Distribution SiteLocky
stickersdes.org
Todaynic.com, Inc. (n/a)
2016-12-13 21:46Distribution SiteLocky
buttonart.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-13 21:46Distribution SiteLocky
karolinadrzewiecka.cba.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-12-13 21:46Distribution SiteLocky
brainfreezeapp.com
GODADDY.COM, LLC (n/a)
2016-12-13 21:46Distribution SiteLocky
salemwitchcat.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-12-13 21:46Distribution SiteLocky
tombart.bluehost.cz
REG-IGNUM217.11.249.141 (- Czech Republic)
2016-12-13 21:46Distribution SiteLocky
bbr-baugrund.de
89.110.129.151 (- Germany)
2016-12-13 21:46Distribution SiteLocky
www.christinepowers.us
Deluxe Small Business Sales, Inc[...]199.34.228.73 (- United States)
2016-12-13 21:46Distribution SiteLocky
electua.org
Internet Invest, Ltd. dba Imena.[...]193.110.162.146 (- Ukraine)
2016-12-13 21:46Distribution SiteLocky
lv-nexis.com
IP MIRROR PTE LTD. DBA IP MIRROR43.245.62.130 (- Singapore)
2016-12-13 21:45Distribution SiteLocky
iassess.net
GODADDY.COM, LLC (n/a)
2016-12-13 21:45Distribution SiteLocky
cap114.fr
OVH213.186.33.24 (- France)
2016-12-13 21:45Distribution SiteLocky
antopisanelli.interfree.it
REGISTER-REG80.91.55.51 (- Italy)
2016-12-13 21:45Distribution SiteLocky
netkeycompany.com
ERANET INTERNATIONAL LIMITED104.27.128.185 (- United States)
2016-12-13 21:45Distribution SiteLocky
tommylam.com
REGISTER.COM, INC.69.49.96.12 (- Canada)
2016-12-13 21:45Distribution SiteLocky
www.placetel.es
62.42.230.17 (- Spain)
2016-12-13 21:45Distribution SiteLocky
tadayou.soragoto.net
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-12-13 21:45Distribution SiteLocky
juliennegre.com
OVH213.186.33.3 (- France)
2016-12-13 21:44Distribution SiteLocky
netkeycompany.com
ERANET INTERNATIONAL LIMITED104.27.128.185 (- United States)
2016-12-13 21:44Distribution SiteLocky
diskobil.dk
94.231.109.70 (- Denmark)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >