Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-12 13:08Distribution SiteLocky
onedotm.com
GODADDY.COM, LLC166.62.10.143 (- United States)
2016-12-12 13:08Distribution SiteLocky
qijiaosoft.com
CHENGDU WEST DIMENSION DIGITAL T[...]50.117.113.222 (- United States)
2016-12-12 13:07Distribution SiteLocky
envisorusa.com
1&1 INTERNET SE198.252.64.188 (- United States)
2016-12-12 13:07Distribution SiteLocky
sunwayautoparts.com
FASTDOMAIN, INC.67.20.110.214 (- United States)
2016-12-12 13:07Distribution SiteLocky
tivicast.org
Chengdu West Dimension Digital T[...] (n/a)
2016-12-12 13:07Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:07Distribution SiteLocky
wordpad.org
MarkMonitor Inc.66.155.40.24 (- United States)
2016-12-12 13:07Distribution SiteLocky
wphone3c.com
GODADDY.COM, LLC122.114.131.2 (- China)
2016-12-12 13:07Distribution SiteLocky
trendsandtrades.nl
TransIP BV79.99.25.29 (- Netherlands)
2016-12-12 13:07Distribution SiteLocky
thenumastore.com
GODADDY.COM, LLC (n/a)
2016-12-12 13:07Distribution SiteLocky
117.239.70.228
n/a
2016-12-12 13:06Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
democro.com
BIGROCK SOLUTIONS LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
hooli.com.au
Web Address Registration27.50.95.218 (- Australia)
2016-12-12 13:06Distribution SiteLocky
trehoada.org
GMO Internet, Inc. d/b/a Onamae.[...]123.30.187.207 (- Vietnam)
2016-12-12 13:06Distribution SiteLocky
tifa-awards.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]150.107.31.57 (- Thailand)
2016-12-12 13:05Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:05Distribution SiteLocky
usedtextilemachinerylive.com
123-REG LIMITED109.203.104.133 (- United Kingdom)
2016-12-12 13:05Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:05Distribution SiteLocky
trade-unite.ru
R01-RU80.78.245.178 (- Russian Federation)
2016-12-12 13:05Distribution SiteLocky
www.pspmrsmag.com
NETEARTH ONE INC. D/B/A NETEARTH103.27.72.10 (- Malaysia)
2016-12-12 13:05Distribution SiteLocky
villa64.dk
94.231.109.94 (- Denmark)
2016-12-12 13:05Distribution SiteLocky
socialandmovieapps.com
ENOM, INC.207.55.244.10 (- United States)
2016-12-12 13:04Distribution SiteLocky
galtechprojects.com
GODADDY.COM, LLC206.72.192.15 (- United States)
2016-12-12 13:04Distribution SiteLocky
www.paradisecity.pk
72.9.157.58 (- United States)
2016-12-12 13:04Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
therapymarketinginstitute.com
WILD WEST DOMAINS, LLC67.225.243.198 (- United States)
2016-12-12 13:04Distribution SiteLocky
thxlove.com
HICHINA ZHICHENG TECHNOLOGY LTD.27.126.186.26 (- Hong Kong)
2016-12-12 13:04Distribution SiteLocky
stmerchandise.net
OMNIS NETWORK, LLC216.239.138.216 (- United States)
2016-12-12 13:04Distribution SiteLocky
dronetech.no
46.30.213.169 (- Denmark)
2016-12-12 13:03Distribution SiteLocky
stephaniemiddendorp.nl
Mijn InternetOplossing B.V.213.163.93.212 (- Netherlands)
2016-12-12 13:03Distribution SiteLocky
www.bfsa.gov.bd
198.54.120.18 (- United States)
2016-12-12 13:03Distribution SiteLocky
megapowercash.com
GODADDY.COM, LLC107.180.47.13 (- United States)
2016-12-12 13:03Distribution SiteLocky
sovereignkitchens.com.au
Web Address Registration103.9.170.251 (- Australia)
2016-12-12 13:03Distribution SiteLocky
icclicks.com
GODADDY.COM, LLC50.63.202.93 (- United States)
2016-12-12 13:03Distribution SiteLocky
skpc.org.au
Synergy Wholesale Pty Ltd192.124.249.18 (- United States)
2016-12-12 13:03Distribution SiteLocky
trilab.sk
163.172.34.76 (- France)
2016-12-12 13:03Distribution SiteLocky
www.refereccu.com
GODADDY.COM, LLC23.229.166.185 (- United States)
2016-12-12 13:03Distribution SiteLocky
www.pspmrsmtumpat.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]203.223.135.38 (- Malaysia)
2016-12-12 13:03Distribution SiteLocky
www.icp.edu.pk
131.153.38.171 (- United States)
2016-12-12 13:02Distribution SiteLocky
wkreation.com
OMNIS NETWORK, LLC216.239.138.131 (- United States)
2016-12-12 13:02Distribution SiteLocky
speckftp.de
87.106.247.11 (- Germany)
2016-12-12 13:02Distribution SiteLocky
sinanagirman.com
IHS TELEKOM, INC. (n/a)
2016-12-12 13:02Distribution SiteLocky
greenresist.com
GODADDY.COM, LLC192.254.137.5 (- United States)
2016-12-12 10:38Botnet C&CLocky
91.219.31.14
91.219.31.14 (- Russian Federation)
2016-12-12 07:04Payment SiteTorrentLocker
ztuw5bvuuapzdfya.klimbim.pl
EPAG Domainservices GmbH (n/a)
2016-12-11 14:26Botnet C&CLocky
lcrdceiajmiar.org
eNom, Inc.208.100.26.234 (- United States)
2016-12-11 07:38Payment SiteCerber
ffoqr3ug7m726zou.wmvsh0.top
Eranet International Limited (n/a)
2016-12-11 05:19Payment SiteCerber
ffoqr3ug7m726zou.utebcd.top
Eranet International Limited185.98.87.66 (- Russian Federation) +1 A record(s) 54.200.9.74 (AS200000, - United States)
2016-12-11 03:35Payment SiteCerber
ffoqr3ug7m726zou.x9ap4h.top
Eranet International Limited (n/a)
2016-12-11 01:58Payment SiteCerber
pe2cku7pebkpgeko.utebcd.top
Eranet International Limited185.98.87.66 (- Russian Federation) +1 A record(s) 54.200.9.74 (AS200000, - United States)
2016-12-11 01:50Payment SiteCerber
pe2cku7pebkpgeko.z5xfkc.top
Eranet International Limited (n/a)
2016-12-11 00:07Payment SiteCerber
pe2cku7pebkpgeko.reu88i.top
Eranet International Limited (n/a)
2016-12-10 22:53Payment SiteCerber
ffoqr3ug7m726zou.umvv28.top
Eranet International Limited (n/a)
2016-12-10 18:56Payment SiteCerber
ffoqr3ug7m726zou.smd95z.top
Eranet International Limited (n/a)
2016-12-10 18:31Botnet C&CLocky
185.102.136.67
185.102.136.67 (- Russian Federation)
2016-12-10 11:46Distribution SiteLocky
rondurkin.com
ENOM, INC.75.98.73.212 (- United States)
2016-12-10 11:46Distribution SiteLocky
wiselysoft.com
GODADDY.COM, LLC (n/a)
2016-12-10 11:46Distribution SiteLocky
xlr8services.com
TUCOWS DOMAINS INC.216.139.23.2 (- United States)
2016-12-10 11:46Distribution SiteLocky
travelinsider.com.au
TPP Internet (n/a)
2016-12-10 11:46Distribution SiteLocky
laferwear.com
GODADDY.COM, LLC184.168.221.59 (- United States)
2016-12-10 11:45Distribution SiteLocky
test.grafixx.org
Vautron Rechenzentrum AG62.75.162.77 (- France)
2016-12-10 11:45Distribution SiteLocky
sublimeshop.co.uk
Ascio Technologies Inc. Denmark [...]80.175.48.130 (- United Kingdom)
2016-12-10 11:45Distribution SiteLocky
u-niwon.com
NETPIA.COM, INC.218.232.104.232 (- Korea)
2016-12-10 11:45Distribution SiteLocky
stonerinsurance.com
DNC HOLDINGS, INC.23.89.175.64 (- United States)
2016-12-10 11:45Distribution SiteLocky
flax-fiber.com
CENTER OF UKRAINIAN INTERNET NAM[...]213.227.192.135 (- Ukraine)
2016-12-10 11:45Distribution SiteLocky
denva-art.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]119.18.42.101 (- Australia)
2016-12-10 11:44Distribution SiteLocky
windshieldrepairvancouver.ca
eNom Canada Corp.68.65.122.56 (- United States)
2016-12-10 10:47Payment SiteCerber
ffoqr3ug7m726zou.zee0xr.top
Eranet International Limited (n/a)
2016-12-09 21:08Payment SiteCerber
pe2cku7pebkpgeko.ttx0ig.top
Eranet International Limited (n/a)
2016-12-09 17:29Botnet C&CLocky
qcwbrevxrotoepsp.pw
Namecheap208.100.26.234 (- United States)
2016-12-09 13:12Distribution SiteLocky
maycongtrinhduylong.com
ONLINENIC, INC.123.30.210.117 (- Vietnam)
2016-12-09 13:12Distribution SiteLocky
rsaf.cz
REG-WEDOS78.108.145.5 (- Czech Republic)
2016-12-09 13:11Distribution SiteLocky
sevenseas.lk
66.96.147.105 (- United States)
2016-12-09 13:11Distribution SiteLocky
spectrumvolunteer.org
GoDaddy.com, LLC198.91.28.65 (- United States)
2016-12-09 13:11Distribution SiteLocky
yaoyao2013.com
CHENGDU WEST DIMENSION DIGITAL T[...]122.114.124.38 (- China)
2016-12-09 13:10Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 13:10Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:08Distribution SiteLocky
www.stavros.ca
Canadian Domain Name Services In[...]65.242.99.1 (- United States)
2016-12-09 13:08Distribution SiteLocky
polgarorvasad.hu
195.228.152.23 (- Hungary)
2016-12-09 13:08Distribution SiteLocky
eringfeld.nl
Denit Internet Services BV94.126.70.11 (- Netherlands)
2016-12-09 13:07Distribution SiteLocky
walkonwheels.net.au
TPP Wholesale Pty Ltd202.125.36.215 (- Australia)
2016-12-09 13:06Distribution SiteLocky
ktlelektro.cz
REG-WEB4U37.44.21.21 (- Czech Republic)
2016-12-09 13:06Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:05Distribution SiteLocky
yaxuantang.com
CHENGDU WEST DIMENSION DIGITAL T[...]122.114.124.34 (- China)
2016-12-09 13:05Distribution SiteLocky
wszystkodokuchni.pl
premium.pl Sp. z o.o.155.133.40.82 (- Poland)
2016-12-09 13:04Distribution SiteLocky
dcareug.com
TUCOWS DOMAINS INC.192.185.79.206 (- United States)
2016-12-09 13:04Distribution SiteLocky
buhu5.ru
REGRU-RU185.4.65.222 (- Russian Federation)
2016-12-09 13:04Distribution SiteLocky
djelixir.com
GODADDY.COM, LLC108.174.153.189 (- United States)
2016-12-09 13:04Distribution SiteLocky
cafe-bg.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]193.68.112.65 (- Bulgaria)
2016-12-09 13:03Distribution SiteLocky
haibeiwuliu.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.131.2 (- China)
2016-12-09 13:03Distribution SiteLocky
angiebundy.com
1&1 INTERNET SE212.227.82.231 (- Germany)
2016-12-09 13:02Distribution SiteLocky
analypia.com
TUCOWS DOMAINS INC.211.202.2.42 (- Korea)
2016-12-09 13:02Distribution SiteLocky
communicore.biz
ONLINENIC, INC. D/B/A CHINA-CHAN[...]208.52.174.23 (- United States)
2016-12-09 13:02Distribution SiteLocky
zealcon.com
GODADDY.COM, LLC199.231.76.122 (- United States)
2016-12-09 13:01Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 13:00Distribution SiteLocky
waat.co.uk
1 & 1 Internet SE217.160.223.75 (- Germany)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >