Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-03-30 16:34Distribution SiteLocky
kingsstaging.consines.in
ZNet Technologies Private Limite[...] (n/a)
2016-03-30 16:33Distribution SiteLocky
srijanexportstowelwarmers.co.uk
PDR Ltd. d/b/a PublicDomainRegis[...]213.52.128.146 (- United Kingdom)
2016-03-30 15:54Botnet C&CTeslaCrypt
grosirkecantikan.com
ENOM, INC.192.185.51.87 (- United States)
2016-03-30 14:02Botnet C&CLocky
93.170.131.108
93.170.131.108 (- Russian Federation)
2016-03-30 13:29Distribution SiteLocky
fabiocaminero.com
NETEARTH ONE INC. D/B/A NETEARTH (n/a)
2016-03-30 13:29Distribution SiteLocky
cssrd.org.lb
5.172.159.231 (- United Kingdom)
2016-03-30 12:54Botnet C&CTeslaCrypt
naturstein-schubert.de
91.250.80.97 (- Germany)
2016-03-30 11:59Distribution SiteLocky
www.deco-dessert.com
GANDI SAS195.154.38.196 (- France)
2016-03-30 11:58Distribution SiteLocky
aztechnologies.co.uk
Wild West Domains, Inc.192.124.249.18 (- United States)
2016-03-30 11:58Distribution SiteLocky
refindsexy.com
GODADDY.COM, LLC192.80.146.30 (- United States)
2016-03-30 10:00Botnet C&CLocky
83.217.25.239
83.217.25.239 (- Russian Federation)
2016-03-30 09:03Distribution SiteLocky
rtcs.com.my
0.75.62.145 (n/a)
2016-03-30 09:02Distribution SiteLocky
arredamentibielle.com
ENOM, INC.79.98.45.56 (- Italy)
2016-03-30 09:02Distribution SiteLocky
www.therapiemontpellier.fr
GANDI (n/a)
2016-03-30 09:02Distribution SiteLocky
divaradyo.com
NICS TELEKOMUNIKASYON TICARET LT[...]45.33.9.234 (- United States)
2016-03-30 09:01Distribution SiteLocky
alexsolenni.it
PLY-REG178.237.15.128 (- Italy)
2016-03-30 09:01Distribution SiteLocky
chocolatesindustrial.com
ENOM, INC.104.236.195.85 (- United States)
2016-03-30 09:00Distribution SiteLocky
fatihyagci.com
GODADDY.COM, LLC185.172.146.83 (- Netherlands)
2016-03-30 08:59Distribution SiteLocky
www.royalcaribbeanbeddingcollection.com
GODADDY.COM, LLC64.207.185.206 (- United States)
2016-03-30 08:55Distribution SiteLocky
folk.garnet-soft.com
TLD REGISTRAR SOLUTIONS LTD (n/a)
2016-03-30 08:55Distribution SiteLocky
downloadroot.com
GODADDY.COM, LLC185.53.179.8 (- Germany)
2016-03-30 08:55Distribution SiteLocky
cainabela.com
GODADDY.COM, LLC46.101.10.216 (- United Kingdom)
2016-03-30 08:51Distribution SiteLocky
bikerswear.co.uk
1 & 1 Internet SE82.146.139.56 (- United Kingdom)
2016-03-30 08:51Distribution SiteLocky
princesa-de-ebano.com
OVH (n/a)
2016-03-30 08:50Distribution SiteLocky
azcarpartsuk.com
MESH DIGITAL LIMITED217.199.164.198 (- United Kingdom)
2016-03-30 08:49Distribution SiteLocky
hotpassion.co.uk
eNom, Inc.5.102.190.238 (- United Kingdom)
2016-03-30 07:39Payment SiteLocky
25z5g623wpqpdwis.onion.to
185.100.85.150 (- Romania) +1 A record(s) 192.36.27.5 (AS60729, - Sweden)
2016-03-30 06:12Distribution SiteLocky
tbde.com.vn
162.243.4.79 (- United States)
2016-03-30 06:12Distribution SiteLocky
silvec.com
UNITED-DOMAINS AG212.9.177.16 (- Germany)
2016-03-30 06:11Distribution SiteLocky
jeweldiva.com
NETWORK SOLUTIONS, LLC.104.207.242.191 (- United States)
2016-03-30 06:11Distribution SiteLocky
hindleys.com
REGISTER.IT SPA194.12.14.73 (- United Kingdom)
2016-03-30 06:10Distribution SiteLocky
gazoccaz.com
ARSYS INTERNET, S.L. D/B/A NICLI[...]83.143.23.4 (- France)
2016-03-30 06:10Distribution SiteLocky
chilloutplanet.com
REGIONAL NETWORK INFORMATION CEN[...]109.71.69.138 (- Slovakia)
2016-03-30 06:10Distribution SiteLocky
canadattparts.com
GODADDY.COM, LLC66.96.160.128 (- United States)
2016-03-30 06:09Distribution SiteLocky
3r.com.ua
ua.1gb (n/a)
2016-03-29 23:43Botnet C&CTeslaCrypt
vtc360.com
GODADDY.COM, LLC107.180.34.199 (- United States)
2016-03-29 18:19Botnet C&CCryptoWall
estudiobarco.com.ar
50.22.11.55 (- United States)
2016-03-29 16:26Botnet C&CLocky
5.135.76.18
5.135.76.18 (- France)
2016-03-29 14:41Distribution SiteLocky
it-mall.eu
PDR Ltd.95.87.7.112 (- Bulgaria)
2016-03-29 13:31Botnet C&CLocky
109.234.35.128
109.234.35.128 (- Russian Federation)
2016-03-29 12:59Botnet C&CTeslaCrypt
starsoftheworld.org
PDR Ltd. d/b/a PublicDomainRegis[...]166.62.28.102 (- United States)
2016-03-29 12:53Distribution SiteLocky
divyabooks.com
NET 4 INDIA LIMITED207.174.215.236 (- United States)
2016-03-29 12:49Botnet C&CTorrentLocker
freemooon.org
Registrar of Domain Names REG.RU[...] (n/a)
2016-03-29 12:45Payment SiteTorrentLocker
3qbyaoohkcqkzrz6.torcommunity.ch
(n/a)
2016-03-29 12:19Distribution SiteLocky
importtoys.nl
Nines B.V.213.171.133.87 (- Netherlands)
2016-03-29 12:19Distribution SiteLocky
yorkshirecyclecompany.com
LCN.COM LTD.212.38.162.150 (- United Kingdom)
2016-03-29 12:19Distribution SiteLocky
ora.life
GoDaddy.com, LLC42.117.1.248 (- Vietnam)
2016-03-29 12:19Distribution SiteLocky
viki-s.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]95.85.12.149 (- Netherlands)
2016-03-29 12:18Distribution SiteLocky
eclipsehotels.com
DOMAIN.COM, LLC96.125.185.100 (- Canada)
2016-03-29 11:59Botnet C&CLocky
185.75.46.4
185.75.46.4 (- Russian Federation)
2016-03-29 11:44Botnet C&CLocky
83.217.8.127
83.217.8.127 (- Russian Federation)
2016-03-29 10:58Distribution SiteLocky
workingcatstudios.com
GODADDY.COM, LLC184.168.139.1 (- United States)
2016-03-29 10:58Distribution SiteLocky
dukeplasticslab.com
GODADDY.COM, LLC (n/a)
2016-03-29 09:18Payment SiteTeslaCrypt
2bdfb.spinakrosa.at
(n/a)
2016-03-29 09:17Payment SiteTeslaCrypt
88fga.ketteaero.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-29 08:03Botnet C&CLocky
78.46.170.79
78.46.170.79 (- Germany)
2016-03-29 07:47Botnet C&CLocky
185.141.25.150
185.141.25.150 (- Romania)
2016-03-28 18:13Botnet C&CTeslaCrypt
holishit.in
GoDaddy.com, LLC (R101-AFIN)160.153.63.4 (- United States)
2016-03-28 15:22Botnet C&CLocky
92.63.87.134
92.63.87.134 (- Latvia)
2016-03-28 15:22Botnet C&CLocky
91.200.14.73
91.200.14.73 (- Ukraine)
2016-03-28 12:13Botnet C&CPayCrypt
livingbybuddhism.com
TUCOWS DOMAINS INC.103.6.198.132 (- Malaysia)
2016-03-28 12:13Botnet C&CPayCrypt
livingbybuddhism.com
TUCOWS DOMAINS INC.103.6.198.132 (- Malaysia)
2016-03-28 10:07Botnet C&CTeslaCrypt
minteee.com
KEY-SYSTEMS GMBH (n/a)
2016-03-28 02:54Botnet C&CLocky
84.19.170.249
84.19.170.249 (- Germany)
2016-03-27 17:37Botnet C&CLocky
185.117.72.94
185.117.72.94 (- Netherlands)
2016-03-27 17:37Botnet C&CLocky
176.31.47.100
176.31.47.100 (- France)
2016-03-27 10:55Botnet C&CTeslaCrypt
asianbooty.net
GODADDY.COM, LLC107.180.50.230 (- United States)
2016-03-27 09:39Distribution SiteLocky
empoweringinternationalministries.org
GoDaddy.com, LLC184.168.221.26 (- United States)
2016-03-27 09:38Distribution SiteLocky
www.farmastock.ru
RU-CENTER-RU178.210.64.73 (- Russian Federation)
2016-03-27 09:23Distribution SiteLocky
skyray.ie
80.111.16.114 (- Ireland)
2016-03-27 09:22Distribution SiteLocky
tigabersaudara.com
HOSTINGER UAB (n/a)
2016-03-27 09:22Distribution SiteLocky
mskphilly.org
GoDaddy.com, LLC184.168.47.225 (- United States)
2016-03-27 09:21Distribution SiteLocky
emprendamosjuntos.com
NEUBOX INTERNET SA DE CV52.204.129.22 (- United States) +1 A record(s) 54.85.127.70 (AS40034, - United States)
2016-03-27 09:21Distribution SiteLocky
famouscouponcodes.com
GODADDY.COM, LLC45.33.9.234 (- United States)
2016-03-27 09:21Distribution SiteLocky
catalog.olegran.com
TUCOWS DOMAINS INC. (n/a)
2016-03-27 09:20Distribution SiteLocky
enticemetwo.yzwebsite.com
GODADDY.COM, LLC (n/a)
2016-03-27 09:20Distribution SiteLocky
khacphucwifiyeu.com
ONLINENIC, INC. (n/a)
2016-03-27 09:20Distribution SiteLocky
kokalsportsco.com
ONLINENIC, INC. (n/a)
2016-03-27 09:19Distribution SiteLocky
barocchiautofficina.it
PLY-REG178.237.15.128 (- Italy)
2016-03-27 09:19Distribution SiteLocky
smenterprisesgroup.com
LAUNCHPAD.COM, INC.192.254.225.179 (- United States)
2016-03-27 09:19Distribution SiteLocky
miss-green.ru
NAUNET-RU146.185.243.134 (- Russian Federation)
2016-03-27 09:18Distribution SiteLocky
oktransport.eu
INTERNET CZ, a.s.81.2.195.73 (- Czech Republic)
2016-03-27 09:18Distribution SiteLocky
kutumobilya.com.tr
185.122.13.177 (- Turkey) +1 A record(s) 185.122.13.37 (AS42926, - Turkey)
2016-03-27 09:17Distribution SiteLocky
luroweb.sk
(n/a)
2016-03-27 09:17Distribution SiteLocky
golfenaccion.com
GODADDY.COM, LLC (n/a)
2016-03-26 11:16Botnet C&CLocky
89.108.84.132
89.108.84.132 (- Russian Federation)
2016-03-26 08:56Payment SiteTorrentLocker
3qbyaoohkcqkzrz6.tordoor.li
(n/a)
2016-03-26 08:46Botnet C&CTorrentLocker
redtable.biz
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-03-25 19:02Botnet C&CTeslaCrypt
www.affiliateproductes.com
GODADDY.COM, LLC107.180.4.124 (- United States)
2016-03-25 19:02Botnet C&CTeslaCrypt
strategicdisaster.info
Crazy Domains FZ-LLC192.186.197.161 (- United States)
2016-03-25 16:29Botnet C&CTeslaCrypt
affiliateproductes.com
GODADDY.COM, LLC107.180.4.124 (- United States)
2016-03-25 16:11Botnet C&CLocky
bwpegsfa.info
GoDaddy.com, LLC45.56.77.175 (- United States)
2016-03-25 11:48Botnet C&CLocky
xyhhuxa.be
101Domain, Inc.195.22.28.196 (- Portugal)
2016-03-25 11:48Botnet C&CLocky
swfqg.in
Enom Inc. (R46-AFIN)208.100.26.234 (- United States)
2016-03-25 10:54Botnet C&CLocky
uhgmnigjpf.biz
REGTIME LTD.93.170.104.127 (- Netherlands)
2016-03-25 10:54Botnet C&CLocky
hmndhdbscgru.pw
Dynadot LLC69.195.129.70 (- United States)
2016-03-25 08:29Payment SiteTeslaCrypt
uj5nj.onanwhit.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-25 08:27Payment SiteTeslaCrypt
2gdb4.leoraorage.at
(n/a)
2016-03-24 21:04Botnet C&CTeslaCrypt
videoaminproduktion.de
87.238.192.67 (- Germany)
2016-03-24 14:32Botnet C&CTeslaCrypt
mcgroupuae.com
GODADDY.COM, LLC166.62.28.147 (- United States)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >