Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-09 13:10Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:08Distribution SiteLocky
www.stavros.ca
Canadian Domain Name Services In[...]65.242.99.1 (- United States)
2016-12-09 13:08Distribution SiteLocky
polgarorvasad.hu
195.228.152.23 (- Hungary)
2016-12-09 13:08Distribution SiteLocky
eringfeld.nl
Denit Internet Services BV94.126.70.11 (- Netherlands)
2016-12-09 13:07Distribution SiteLocky
walkonwheels.net.au
TPP Wholesale Pty Ltd202.125.36.215 (- Australia)
2016-12-09 13:06Distribution SiteLocky
ktlelektro.cz
REG-WEB4U37.44.21.21 (- Czech Republic)
2016-12-09 13:06Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:05Distribution SiteLocky
yaxuantang.com
CHENGDU WEST DIMENSION DIGITAL T[...]122.114.124.34 (- China)
2016-12-09 13:05Distribution SiteLocky
wszystkodokuchni.pl
premium.pl Sp. z o.o.155.133.40.82 (- Poland)
2016-12-09 13:04Distribution SiteLocky
dcareug.com
TUCOWS DOMAINS INC.192.185.79.206 (- United States)
2016-12-09 13:04Distribution SiteLocky
buhu5.ru
REGRU-RU185.4.65.222 (- Russian Federation)
2016-12-09 13:04Distribution SiteLocky
djelixir.com
GODADDY.COM, LLC108.174.153.189 (- United States)
2016-12-09 13:04Distribution SiteLocky
cafe-bg.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]193.68.112.65 (- Bulgaria)
2016-12-09 13:03Distribution SiteLocky
haibeiwuliu.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.131.2 (- China)
2016-12-09 13:03Distribution SiteLocky
angiebundy.com
1&1 INTERNET SE212.227.82.231 (- Germany)
2016-12-09 13:02Distribution SiteLocky
analypia.com
TUCOWS DOMAINS INC.211.202.2.42 (- Korea)
2016-12-09 13:02Distribution SiteLocky
communicore.biz
ONLINENIC, INC. D/B/A CHINA-CHAN[...]208.52.174.23 (- United States)
2016-12-09 13:02Distribution SiteLocky
zealcon.com
GODADDY.COM, LLC199.231.76.122 (- United States)
2016-12-09 13:01Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 13:00Distribution SiteLocky
waat.co.uk
1 & 1 Internet SE217.160.223.75 (- Germany)
2016-12-09 13:00Distribution SiteLocky
facerecognition.com.ba
195.222.33.173 (- Bosnia and Herzegovina)
2016-12-09 12:59Distribution SiteLocky
kathollowell.com
GO FRANCE DOMAINS, LLC74.208.236.64 (- United States)
2016-12-09 12:59Distribution SiteLocky
pablopaz.com
ENOM, INC.143.95.60.166 (- United States)
2016-12-09 12:57Distribution SiteLocky
mikegranditsky.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]212.97.132.151 (- Denmark)
2016-12-09 12:57Distribution SiteLocky
vipseal.de
79.125.120.243 (- Ireland)
2016-12-09 12:56Distribution SiteLocky
fm1111.fr
1&1 Internet SE217.160.223.118 (- Germany)
2016-12-09 12:55Distribution SiteLocky
kh2.co.uk
Plusnet Plc t/a Just-the-Name185.65.42.98 (- United Kingdom)
2016-12-09 12:55Distribution SiteLocky
youhaoyouduo.com
BIZCN.COM, INC.192.169.81.126 (- United States)
2016-12-09 12:55Distribution SiteLocky
cstcarpenteria.it
TOPHOST-REG95.110.211.42 (- Italy)
2016-12-09 12:54Distribution SiteLocky
braindouble.com
GODADDY.COM, LLC (n/a)
2016-12-09 06:44Distribution SiteLocky
wt7dzbn78.homepage.t-online.de
80.150.6.138 (- Germany)
2016-12-09 06:43Distribution SiteLocky
bigtrust.co.kr
211.40.221.90 (- Korea)
2016-12-09 06:43Distribution SiteLocky
jhengineering.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-12-09 06:43Distribution SiteLocky
210.240.104.2
n/a
2016-12-09 06:43Distribution SiteLocky
zophotos.com
REGISTER.COM, INC.162.213.255.16 (- United States)
2016-12-09 06:43Distribution SiteLocky
guardian-angels-diva.de
72.52.4.120 (- United States)
2016-12-09 06:42Distribution SiteLocky
weboriginal.eu
NETIM185.6.139.151 (- Hungary)
2016-12-09 06:42Distribution SiteLocky
www.young-boys-hawisch.de
(n/a)
2016-12-09 06:42Distribution SiteLocky
rulebraker.ru
RU-CENTER-RU79.137.163.52 (- Russian Federation)
2016-12-09 06:42Distribution SiteLocky
sublimeshop.co.uk
Ascio Technologies Inc. Denmark [...]80.175.48.130 (- United Kingdom)
2016-12-09 06:42Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:42Distribution SiteLocky
smc.psuti.ru
NAUNET-RU94.25.37.27 (- Russian Federation)
2016-12-09 06:41Distribution SiteLocky
laferwear.com
GODADDY.COM, LLC184.168.221.59 (- United States)
2016-12-09 06:41Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:40Distribution SiteLocky
u-niwon.com
NETPIA.COM, INC.218.232.104.232 (- Korea)
2016-12-09 06:40Distribution SiteLocky
wudiai.com
ENAME TECHNOLOGY CO., LTD.119.29.9.237 (- China)
2016-12-09 06:40Distribution SiteLocky
www.serial-production.com
EPAG DOMAINSERVICES GMBH78.46.57.207 (- Germany)
2016-12-09 06:39Distribution SiteLocky
alci.dommel.be
SCHEDOM NV / DOMMEL.COM193.109.184.81 (- Belgium)
2016-12-09 06:39Distribution SiteLocky
viscarci.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-12-09 06:39Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:39Distribution SiteLocky
theamericanwake.com
ENOM, INC.208.56.45.17 (- United States)
2016-12-09 06:39Distribution SiteLocky
maycongtrinhduylong.com
ONLINENIC, INC.123.30.210.117 (- Vietnam)
2016-12-09 06:39Distribution SiteLocky
vipseal.de
79.125.120.243 (- Ireland)
2016-12-09 06:38Distribution SiteLocky
malamut.org
Key-Systems GmbH212.85.104.64 (- Poland)
2016-12-09 06:38Distribution SiteLocky
markettv.ro
ICI - ROTLD89.149.4.195 (- Romania)
2016-12-09 06:38Distribution SiteLocky
mondegraphic.com
ENOM, INC.37.187.143.115 (- France)
2016-12-09 06:38Distribution SiteLocky
blackdildo.net
ENOM, INC.69.64.147.39 (- United States)
2016-12-09 06:38Distribution SiteLocky
yug13.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.63.93 (- Canada)
2016-12-09 06:38Distribution SiteLocky
unilite.ro
ROSPOT SRL188.213.21.75 (- Romania)
2016-12-09 06:38Distribution SiteLocky
www.arstaelteknik.com
NICTRADE INTERNET IDENTITY PROVI[...] (n/a)
2016-12-09 06:37Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC50.63.202.57 (- United States)
2016-12-09 06:37Distribution SiteLocky
admin3.rtaf.mi.th
T.H.NIC Co., Ltd. (n/a)
2016-12-09 06:37Distribution SiteLocky
szwanrong.com
XIN NET TECHNOLOGY CORPORATION119.29.99.214 (- China)
2016-12-09 06:36Distribution SiteLocky
stonerinsurance.com
DNC HOLDINGS, INC.23.89.175.64 (- United States)
2016-12-09 06:36Distribution SiteLocky
www.dsalchi.org
eNom, Inc.204.93.177.211 (- United States)
2016-12-09 06:36Distribution SiteLocky
www.cosentinoarredamenti.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]46.254.39.57 (- Italy)
2016-12-09 06:36Distribution SiteLocky
zagle.zbaszynek.pl
nazwa.pl sp. z o.o. (n/a)
2016-12-09 06:35Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:35Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:35Distribution SiteLocky
akristall.ru
RU-CENTER-RU195.208.1.109 (- Russian Federation)
2016-12-09 06:35Distribution SiteLocky
u-flats.com
GODADDY.COM, LLC209.236.73.195 (- United States)
2016-12-09 06:35Distribution SiteLocky
polgarorvasad.hu
195.228.152.23 (- Hungary)
2016-12-09 06:34Distribution SiteLocky
steelfs.com.mx
NEUBOX Internet SA de CV207.210.232.52 (- United States)
2016-12-09 06:34Distribution SiteLocky
www.keytone-production.de
80.150.6.143 (- Germany)
2016-12-09 06:33Distribution SiteLocky
smp.com.mx
Hospedando.Com.Mx67.227.172.16 (- United States)
2016-12-09 06:33Distribution SiteLocky
test.grafixx.org
Vautron Rechenzentrum AG62.75.162.77 (- Germany)
2016-12-09 06:33Distribution SiteLocky
berndburgdorf.de
(n/a)
2016-12-09 06:33Distribution SiteLocky
essenciadoequilibrio.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.90.56.166 (- Portugal)
2016-12-09 06:33Distribution SiteLocky
windshieldrepairvancouver.ca
eNom Canada Corp.68.65.122.56 (- United States)
2016-12-09 06:33Distribution SiteLocky
yaopuwang.cn
浙江贰贰网络有限公司120.24.85.109 (- China)
2016-12-09 06:33Distribution SiteLocky
www.damasoinfante.com
10DENCEHISPAHARD, S.L134.0.11.154 (- Spain)
2016-12-09 06:33Distribution SiteLocky
water1004.com
MEGAZONE CORP. DBA HOSTING.KR218.38.12.95 (- Korea)
2016-12-09 06:32Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC160.153.74.69 (- United States)
2016-12-09 06:32Distribution SiteLocky
youspeak.pt
109.71.40.117 (- Portugal)
2016-12-09 06:32Distribution SiteLocky
www.visionaero.com
NETWORK SOLUTIONS, LLC.64.71.34.45 (- United States)
2016-12-09 06:32Distribution SiteLocky
subys.com
DOTNAME KOREA CORP (n/a)
2016-12-09 06:31Distribution SiteLocky
djprestige.net
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-12-09 06:31Distribution SiteLocky
buhoutserts.ru
REGRU-RU (n/a)
2016-12-09 06:31Distribution SiteLocky
otdamvam.com
GODADDY.COM, LLC46.30.46.15 (- Russian Federation)
2016-12-09 06:31Distribution SiteLocky
mikegranditsky.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]212.97.132.151 (- Denmark)
2016-12-09 06:31Distribution SiteLocky
aetech-solutions.com
DOMAIN.COM, LLC37.59.51.53 (- France)
2016-12-09 06:30Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:30Distribution SiteLocky
opal.webserwer.pl
Lingua-IT Sp. z o.o.176.32.162.200 (- Poland)
2016-12-09 06:30Distribution SiteLocky
www.jansen-consultancy-machines.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-12-09 06:30Distribution SiteLocky
zivilrecht.at
216.55.105.144 (- Canada)
2016-12-09 06:29Distribution SiteLocky
www.jacquesdalne.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-12-09 06:29Distribution SiteLocky
wiselysoft.com
GODADDY.COM, LLC (n/a)
2016-12-09 06:29Distribution SiteLocky
lhhme.com.sg
IP MIRROR PTE LTD103.9.101.111 (- Singapore)
2016-12-09 06:29Distribution SiteLocky
www.swordwind.org
GoDaddy.com, LLC216.249.101.162 (- United States)
2016-12-09 06:29Distribution SiteLocky
containermx.com
INTERNET DOMAIN SERVICE BS CORP (n/a)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >