Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-24 11:06Distribution SiteLocky
stellaar.com
NETWORK SOLUTIONS, LLC.179.188.17.138 (- Brazil)
2016-11-24 11:06Distribution SiteLocky
schmidtbauer.at
5.9.25.251 (- Germany)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:06Distribution SiteLocky
sexexpo.ro
ICI - ROTLD93.122.132.142 (- Romania)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 09:48Payment SiteCerber
vyohacxzoue32vvk.p9su2u.top
Eranet International Limited (n/a)
2016-11-24 05:30Payment SiteCerber
vyohacxzoue32vvk.d7h6yx.top
Eranet International Limited (n/a)
2016-11-24 02:14Payment SiteCerber
ahuqfrqk54v3vnzj.bds4sn.top
Eranet International Limited (n/a)
2016-11-24 00:51Payment SiteCerber
vyohacxzoue32vvk.ac7zvz.top
Eranet International Limited (n/a)
2016-11-23 21:55Payment SiteCerber
xrhwryizf5mui7a5.vgxcci.top
Eranet International Limited (n/a)
2016-11-23 20:07Botnet C&CLocky
91.211.119.98
91.211.119.98 (- Ukraine)
2016-11-23 19:43Payment SiteCerber
ahuqfrqk54v3vnzj.4h16v3.top
Eranet International Limited (n/a)
2016-11-23 19:14Botnet C&CLocky
95.46.114.205
95.46.114.205 (- Czech Republic)
2016-11-23 18:59Distribution SiteLocky
nicputeec.com
REGIONAL NETWORK INFORMATION CEN[...]91.226.93.18 (- Russian Federation)
2016-11-23 18:59Distribution SiteLocky
obsidian.cl
201.238.211.150 (- Chile)
2016-11-23 18:59Distribution SiteLocky
golden-bereg.ru
RU-CENTER-RU37.230.114.67 (- Russian Federation)
2016-11-23 18:58Distribution SiteLocky
muricreklamcilik.com
FBS INC.94.73.147.210 (- Turkey)
2016-11-23 18:58Distribution SiteLocky
noisecontrols.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]104.223.48.221 (- United States)
2016-11-23 18:57Distribution SiteLocky
dhmodel.cz
REG-ACTIVE2489.185.225.40 (- Czech Republic)
2016-11-23 18:57Distribution SiteLocky
interprofil.no
(n/a)
2016-11-23 18:57Distribution SiteLocky
gremr.ma
GENIOUS COMMUNICATION185.27.135.2 (- United Kingdom)
2016-11-23 18:56Distribution SiteLocky
hightradingfrequency.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.37.35.92 (- United States)
2016-11-23 18:56Distribution SiteLocky
gomuskegon.mobi
GoDaddy.com, LLC74.50.13.127 (- United States)
2016-11-23 18:56Distribution SiteLocky
gold-or.ca
Webnames.ca Inc.104.37.35.81 (- United States)
2016-11-23 18:56Distribution SiteLocky
orthoskin.com
CRONON AG81.169.145.80 (- Germany)
2016-11-23 18:54Distribution SiteLocky
greentic.univcasa.ma
MEDI TELECOM196.200.165.11 (- Morocco)
2016-11-23 18:53Distribution SiteLocky
panificadoraavenida.com
MARCARIA.COM, INTERNATIONAL, INC[...]107.6.144.42 (- United States)
2016-11-23 18:53Distribution SiteLocky
rentalpark.com.ar
(n/a)
2016-11-23 18:52Distribution SiteLocky
peruincoming.com
ENOM, INC.198.54.114.155 (- United States)
2016-11-23 18:52Distribution SiteLocky
frivill.hu
91.82.226.140 (- Hungary)
2016-11-23 18:52Distribution SiteLocky
fu-k.jp
61.208.203.245 (- Japan)
2016-11-23 18:52Distribution SiteLocky
4006600592.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-11-23 18:52Distribution SiteLocky
lecitron.org
Key-Systems GmbH94.231.103.127 (- Denmark)
2016-11-23 18:51Distribution SiteLocky
gpstrackerbali.com
CV. JOGJACAMP219.83.68.90 (- Indonesia)
2016-11-23 18:51Distribution SiteLocky
highlandsolar.ca
Promo People Inc.69.90.160.250 (- Canada)
2016-11-23 18:50Distribution SiteLocky
vikingradom.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:49Distribution SiteLocky
h-miyoshi.ed.jp
219.94.128.187 (- Japan)
2016-11-23 18:49Distribution SiteLocky
grafian.pl
Consulting Service Sp. z o.o.85.17.184.32 (- Netherlands)
2016-11-23 18:48Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:48Distribution SiteLocky
helfter.fr
OVH213.186.33.40 (- France)
2016-11-23 18:48Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:47Distribution SiteLocky
giochasach.com
ENOM, INC.103.9.76.87 (- Vietnam)
2016-11-23 18:46Distribution SiteLocky
chuzhang.net
CHENGDU WEST DIMENSION DIGITAL T[...]211.149.250.179 (- China)
2016-11-23 18:45Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 15:54Distribution SiteLocky
normalizemusic.com
REGISTER.COM, INC.66.84.59.98 (- United States)
2016-11-23 15:54Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-23 15:54Distribution SiteLocky
power4speed.com
GODADDY.COM, LLC216.131.90.178 (- United States)
2016-11-23 15:53Distribution SiteLocky
premagro.ro
ICI - ROTLD176.223.208.18 (- Romania)
2016-11-23 15:53Distribution SiteLocky
nabila.co.id
118.98.75.70 (- Indonesia)
2016-11-23 15:52Distribution SiteLocky
raivel.pt
188.93.230.41 (- Portugal)
2016-11-23 15:51Distribution SiteLocky
rgbserver.be
AXC108.174.149.222 (- United States)
2016-11-23 15:50Distribution SiteLocky
panoramicprocurement.net
GODADDY.COM, LLC23.229.173.235 (- United States)
2016-11-23 15:50Distribution SiteLocky
pedullaelectric.com
TUCOWS DOMAINS INC.69.90.160.65 (- Canada)
2016-11-23 15:50Distribution SiteLocky
rafaelleon.es
51.255.70.85 (- France)
2016-11-23 15:49Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-23 15:48Distribution SiteLocky
pakcek.com
ENOM, INC.198.54.115.49 (- United States)
2016-11-23 15:47Distribution SiteLocky
nkfyfs.cn
郑州世纪创联电子科技[...]122.114.147.82 (- China)
2016-11-23 15:47Distribution SiteLocky
padcha.com
GODADDY.COM, LLC166.62.28.143 (- United States)
2016-11-23 15:47Distribution SiteLocky
pietroconfalonieri.com
TUCOWS DOMAINS INC.93.186.251.182 (- Italy)
2016-11-23 15:45Distribution SiteLocky
p-sysnet.de
213.165.89.183 (- Germany)
2016-11-23 15:45Distribution SiteLocky
platinumrainbow.com
ENOM, INC.98.124.251.167 (- United States)
2016-11-23 10:49Distribution SiteLocky
prayerarchive.com
WILD WEST DOMAINS, LLC50.115.230.116 (- United States)
2016-11-23 10:49Distribution SiteLocky
nicehdwall.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-23 10:48Distribution SiteLocky
pratecnet.org
eNom, Inc.66.7.218.232 (- United States)
2016-11-23 10:48Distribution SiteLocky
pesci.ro
ICI - ROTLD89.18.180.28 (- Netherlands)
2016-11-23 10:48Distribution SiteLocky
ptworkdomain.com
DOMAINPEOPLE, INC. (n/a)
2016-11-23 10:47Distribution SiteLocky
qdweierya.com
HICHINA ZHICHENG TECHNOLOGY LTD.103.82.53.118 (- China)
2016-11-23 10:47Distribution SiteLocky
pensionwoehler.de
91.233.84.194 (- Germany)
2016-11-23 10:47Distribution SiteLocky
nightpeople.co.il
81.218.71.214 (- Israel)
2016-11-23 10:47Distribution SiteLocky
pearlgonzalez.com
TUCOWS DOMAINS INC.166.63.11.180 (- United States)
2016-11-23 10:47Distribution SiteLocky
nhatnang.vn
125.212.196.105 (- Vietnam)
2016-11-23 10:46Distribution SiteLocky
plus39italiandesign.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-23 10:46Distribution SiteLocky
reklomastik.com
FBS INC.185.149.100.114 (- Turkey)
2016-11-23 10:46Distribution SiteLocky
retrokit.ca
Promo People Inc.69.90.161.130 (- Canada)
2016-11-23 10:46Distribution SiteLocky
rabavolgy.hu
185.5.229.30 (- Hungary)
2016-11-23 10:45Distribution SiteLocky
plasterers-spb.ru
R01-RU148.251.187.239 (- Germany)
2016-11-23 10:45Distribution SiteLocky
prismaserv.ro
Romarg SRL89.163.253.248 (- Germany)
2016-11-23 10:45Distribution SiteLocky
ovacii.biz
HOSTING UKRAINE LLC.109.68.190.156 (- Russian Federation)
2016-11-23 10:45Distribution SiteLocky
opakowania.info
Key-Systems GmbH (n/a)
2016-11-23 10:45Distribution SiteLocky
nirvel.ca
Register4Less.com69.51.202.74 (- Canada)
2016-11-23 10:45Distribution SiteLocky
vedicmotet.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:45Distribution SiteLocky
ozzu.de
(n/a)
2016-11-23 10:44Distribution SiteLocky
jinxlaze.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 10:44Distribution SiteLocky
rightman.co.th
T.H.NIC Co., Ltd.150.107.31.73 (- Thailand)
2016-11-23 10:44Distribution SiteLocky
racersguide.com
DOMAIN.COM, LLC192.124.249.10 (- United States)
2016-11-23 10:44Distribution SiteLocky
orchideus.cz
REG-INTERNET-CZ81.31.42.12 (- Czech Republic)
2016-11-23 10:44Distribution SiteLocky
pvlabs.com
GODADDY.COM, LLC107.180.26.179 (- United States)
2016-11-23 10:43Distribution SiteLocky
printo.nl
Totaaldomein B.V.85.17.199.99 (- Netherlands)
2016-11-23 10:43Distribution SiteLocky
playdog.ro
ROSPOT SRL (n/a)
2016-11-23 10:43Distribution SiteLocky
nielsredeker.nl
i24 Group B.V.31.204.153.171 (- Netherlands)
2016-11-23 10:43Distribution SiteLocky
naturalnepodlogi.cba.pl
Abc Hosting Ltd.95.211.80.4 (- Netherlands)
2016-11-23 10:43Distribution SiteLocky
broncvita.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 10:43Distribution SiteLocky
polgraf.eu
Consulting Service Sp. z o.o.188.116.9.199 (- Poland)
2016-11-23 10:43Distribution SiteLocky
novinnic.ir
148.251.224.12 (- Germany)
2016-11-23 10:43Distribution SiteLocky
pregnancysquare.com
NAME.COM, INC.27.254.41.206 (- Thailand)
2016-11-23 10:43Distribution SiteLocky
proancosl.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]185.161.96.11 (- Spain)
2016-11-23 10:43Distribution SiteLocky
ondeviesurgut.myjino.ru
R01-RU (n/a)
2016-11-23 10:42Distribution SiteLocky
offerrat.com
NAME.COM, INC.63.251.232.36 (- United States)

# of rows displayed: 100
# of entries in database: 9'211

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >