Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-25 10:45Distribution SiteLocky
prongai.com
ONLINENIC, INC.59.152.207.106 (- Hong Kong)
2016-11-25 10:44Distribution SiteLocky
vmeste-hudeem.ru
REGRU-RU (n/a)
2016-11-25 10:44Distribution SiteLocky
sydayont.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 10:43Distribution SiteLocky
thegarageteam.gr
178.32.154.18 (- France)
2016-11-25 10:43Distribution SiteLocky
uzmanfren.com.tr
93.186.120.141 (- Turkey)
2016-11-25 10:43Distribution SiteLocky
signumtte.net
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.50 (- Turkey)
2016-11-25 10:42Distribution SiteLocky
premierpromotions.co.uk
UK2 Limited217.154.116.196 (- United Kingdom)
2016-11-25 10:42Distribution SiteLocky
videobandnaardvd.com
KEY-SYSTEMS GMBH149.210.164.149 (- Netherlands)
2016-11-25 10:41Distribution SiteLocky
ryrszs.com
BEIJING INNOVATIVE LINKAGE TECHN[...]144.48.4.199 (- Hong Kong)
2016-11-25 10:41Distribution SiteLocky
tehrankhabar.ir
185.55.224.4 (- Iran)
2016-11-25 10:40Distribution SiteLocky
jackybrith.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-25 10:40Distribution SiteLocky
velolenta.com
NAME.COM, INC. (n/a)
2016-11-25 10:26Payment SiteCerber
ffoqr3ug7m726zou.rzvhne.top
Eranet International Limited (n/a)
2016-11-25 10:06Payment SiteCerber
ffoqr3ug7m726zou.zjfbxy.top
Eranet International Limited (n/a)
2016-11-25 06:28Distribution SiteLocky
sungbocne.com
INAMES CO., LTD.118.128.124.131 (- Korea)
2016-11-25 06:28Distribution SiteLocky
vanniersen.nl
AXC185.104.28.58 (- Netherlands)
2016-11-25 06:28Distribution SiteLocky
vitreus.nl
AutoDNS109.71.51.147 (- Netherlands)
2016-11-25 06:27Distribution SiteLocky
todos.com.au
Tucows69.49.176.209 (- United States)
2016-11-25 06:27Distribution SiteLocky
soulchance.com
HICHINA ZHICHENG TECHNOLOGY LTD.74.220.199.14 (- United States)
2016-11-25 06:27Distribution SiteLocky
hylegmassy.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 06:27Distribution SiteLocky
shomesofa.com
GODADDY.COM, LLC112.78.10.7 (- Vietnam)
2016-11-25 06:27Distribution SiteLocky
puttechnologies.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.186.242.166 (- United States)
2016-11-25 06:27Distribution SiteLocky
pivno.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.10.18.26 (- Hong Kong)
2016-11-25 06:26Distribution SiteLocky
irangood.com
HICHINA ZHICHENG TECHNOLOGY LTD.61.144.195.209 (- China)
2016-11-25 06:26Distribution SiteLocky
szycfj.com
CHENGDU WEST DIMENSION DIGITAL T[...]103.238.224.213 (- Hong Kong)
2016-11-25 06:26Distribution SiteLocky
thinx.net
GODADDY.COM, LLC107.180.41.245 (- United States)
2016-11-25 06:26Distribution SiteLocky
svegev.ru
REGTIME-RU92.53.123.104 (- Russian Federation)
2016-11-25 06:26Distribution SiteLocky
repka.eu
Atlantis Systems s.r.o.80.94.52.78 (- Slovakia)
2016-11-25 06:26Distribution SiteLocky
slut-land.com
1&1 INTERNET SE72.52.4.90 (- United States)
2016-11-25 06:26Distribution SiteLocky
starbizz.de
81.169.145.156 (- Germany)
2016-11-25 06:26Distribution SiteLocky
simtecs.net
ARSYS INTERNET, S.L. D/B/A NICLI[...]164.138.208.188 (- Spain)
2016-11-25 06:25Distribution SiteLocky
tybor.hu
195.228.86.32 (- Hungary)
2016-11-25 06:25Distribution SiteLocky
starovencleaning.co.uk
123-Reg Limited t/a 123-reg (n/a)
2016-11-25 06:25Distribution SiteLocky
veinteproducciones.com.ar
108.167.180.133 (- United States)
2016-11-25 06:25Distribution SiteLocky
satthachkhe.vn
210.245.86.46 (- Vietnam)
2016-11-25 06:25Distribution SiteLocky
templeofrefuge.net
GODADDY.COM, LLC107.180.50.241 (- United States)
2016-11-25 06:25Distribution SiteLocky
sitivisibili.it
INWEB-REG46.254.36.132 (- Italy)
2016-11-25 06:25Distribution SiteLocky
secur.ph
216.177.137.4 (- United States)
2016-11-25 06:25Distribution SiteLocky
thenomadhostel.com
1&1 INTERNET SE (n/a)
2016-11-25 06:24Distribution SiteLocky
szgoland.net
GODADDY.COM, LLC66.228.57.40 (- United States)
2016-11-25 06:24Distribution SiteLocky
sunfriends.nl
TransIP BV185.30.238.25 (- Netherlands)
2016-11-25 06:24Distribution SiteLocky
tuurbo.be
Transip BV185.66.250.196 (- Netherlands)
2016-11-25 06:24Distribution SiteLocky
veritasresults.com
GODADDY.COM, LLC144.208.70.127 (- United States)
2016-11-25 06:24Distribution SiteLocky
merchhora.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 06:24Distribution SiteLocky
rerda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]174.142.8.200 (- Canada)
2016-11-25 06:24Distribution SiteLocky
use-inc.tv
NETWORK SOLUTIONS, LLC.153.231.254.213 (- Japan)
2016-11-25 06:24Distribution SiteLocky
stservis14.ru
R01-RU92.53.114.85 (- Russian Federation)
2016-11-25 06:23Distribution SiteLocky
ruangmobil.com
CV. JOGJACAMP49.0.1.156 (- Indonesia)
2016-11-25 06:23Distribution SiteLocky
tdtrading.nl
Mijn InternetOplossing B.V.94.75.249.24 (- Netherlands)
2016-11-25 06:23Distribution SiteLocky
bootyculla.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-25 06:23Distribution SiteLocky
cafiztarea.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-25 06:23Distribution SiteLocky
placezebub.net
KEY-SYSTEMS GMBH (n/a)
2016-11-25 03:52Payment SiteCerber
vyohacxzoue32vvk.5m2n7x.top
Eranet International Limited (n/a)
2016-11-24 20:08Botnet C&CLocky
pdlbtnfhtoxghb.org
Dynadot, LLC69.195.129.70 (- United States)
2016-11-24 16:20Payment SiteCerber
ffoqr3ug7m726zou.v0xn1i.bid
Eranet International Limited (n/a)
2016-11-24 15:56Payment SiteCerber
ffoqr3ug7m726zou.zu3fzc.bid
Eranet International Limited (n/a)
2016-11-24 11:20Distribution SiteLocky
phukiengalaxy.com
ONLINENIC, INC.123.30.171.115 (- Vietnam)
2016-11-24 11:20Distribution SiteLocky
raje.dk
46.30.213.246 (- Denmark)
2016-11-24 11:20Distribution SiteLocky
prmiramar.com
ENOM, INC.187.73.33.61 (- Brazil)
2016-11-24 11:20Distribution SiteLocky
rightofdecimal.com
GODADDY.COM, LLC192.186.204.102 (- United States)
2016-11-24 11:20Distribution SiteLocky
poorten-derycke.be
My-Websitebuilder.com bvba185.18.9.143 (- Netherlands)
2016-11-24 11:20Distribution SiteLocky
skgs.nl
Totaaldomein B.V.85.17.199.29 (- Netherlands)
2016-11-24 11:20Distribution SiteLocky
restauranttajmahal.ca
Promo People Inc.76.74.128.120 (- Canada)
2016-11-24 11:19Distribution SiteLocky
superagencja.eu
Michau Enterprises Limited85.128.200.200 (- Poland)
2016-11-24 11:19Distribution SiteLocky
pesaroeventi.it
OVH-REG (n/a)
2016-11-24 11:19Distribution SiteLocky
newskillacademy.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-24 11:19Distribution SiteLocky
procor.com.mx
Wild West Domains192.185.134.36 (- United States)
2016-11-24 11:19Distribution SiteLocky
soyyigit.com.tr
77.79.81.230 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
svcangel.com
GODADDY.COM, LLC107.180.44.152 (- United States)
2016-11-24 11:19Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
medicariel.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:19Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.66.55.132.10 (- United States)
2016-11-24 11:19Distribution SiteLocky
plast-chem.com.pl
INFO-CAL188.116.20.185 (- Poland)
2016-11-24 11:19Distribution SiteLocky
staging.santana.eu
Combell NV79.174.131.204 (- Netherlands)
2016-11-24 11:19Distribution SiteLocky
somersetautotints.co.uk
eNom, Inc.5.133.180.146 (- United Kingdom)
2016-11-24 11:19Distribution SiteLocky
prizor.net
ENOM, INC.92.60.224.52 (- Serbia)
2016-11-24 11:19Distribution SiteLocky
szhuangming.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.15.63 (- Canada)
2016-11-24 11:18Distribution SiteLocky
uae4all.com
NAME.COM, INC.151.80.243.50 (- France)
2016-11-24 11:18Distribution SiteLocky
readtogether.org.uk
123-Reg Limited t/a 123-reg94.136.40.103 (- United Kingdom)
2016-11-24 11:18Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...]173.254.28.102 (- United States)
2016-11-24 11:18Distribution SiteLocky
thoseads.com
GODADDY.COM, LLC199.79.54.237 (- United States)
2016-11-24 11:18Distribution SiteLocky
paultuttle.us
ENOM, INC.204.93.177.191 (- United States)
2016-11-24 11:18Distribution SiteLocky
muka.tnmrk.ru
REGRU-RU (n/a)
2016-11-24 11:18Distribution SiteLocky
turystyka.cal.pl
INFO-CAL91.185.191.163 (- Poland)
2016-11-24 11:11Distribution SiteLocky
smolwow.ru
REGRU-RU46.105.212.150 (- France)
2016-11-24 11:10Distribution SiteLocky
sandiegoblindandshade.com
GODADDY.COM, LLC65.75.140.66 (- United States)
2016-11-24 11:09Distribution SiteLocky
ruf.com.ar
107.180.41.45 (- United States)
2016-11-24 11:09Distribution SiteLocky
TruePublish.de
144.76.56.233 (- Germany)
2016-11-24 11:09Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
safety-speed.ru
NETHOUSE-RU5.9.21.140 (- Germany)
2016-11-24 11:09Distribution SiteLocky
trinechina.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.49 (- China)
2016-11-24 11:08Distribution SiteLocky
stroybal.ru
REGRU-RU212.86.102.70 (- Ukraine)
2016-11-24 11:08Distribution SiteLocky
stazilivio.it
TRINATEL-REG5.134.127.240 (- Italy)
2016-11-24 11:08Distribution SiteLocky
maticelesnicka.cz
REG-IGNUM81.0.212.3 (- Czech Republic)
2016-11-24 11:07Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-24 11:07Distribution SiteLocky
statikwerk.de
83.141.34.141 (- Germany)
2016-11-24 11:07Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:06Distribution SiteLocky
structuralstonellc.com
WILD WEST DOMAINS, LLC162.244.253.58 (- United States)
2016-11-24 11:06Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)

# of rows displayed: 100
# of entries in database: 9'211

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >