Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-30 17:04Distribution SiteLocky
pppconstruction.co.za
196.29.61.1 (- South Africa)
2016-11-30 17:03Distribution SiteLocky
rhinohosts.com
WILD WEST DOMAINS, LLC107.180.43.18 (- United States)
2016-11-30 17:03Distribution SiteLocky
decorvise.com
1&1 INTERNET SE217.160.0.75 (- Germany)
2016-11-30 17:03Distribution SiteLocky
psouutarnow.org
Key-Systems GmbH (n/a)
2016-11-30 17:03Distribution SiteLocky
revaitsolutions.com
GODADDY.COM, LLC166.62.28.127 (- United States)
2016-11-30 17:03Distribution SiteLocky
p2pbikini.com
MAT BAO TRADING & SERVICE COMPAN[...]204.11.56.48 (- Virgin Islands)
2016-11-30 17:03Distribution SiteLocky
receptoare-satelit.ro
ICI - ROTLD (n/a)
2016-11-30 17:02Distribution SiteLocky
nunutjoe.com
CV. JOGJACAMP103.31.250.100 (- Indonesia)
2016-11-30 17:02Distribution SiteLocky
p-sysnet.de
213.165.89.183 (- Germany)
2016-11-30 17:01Distribution SiteLocky
onushilon.org
eNom, Inc.121.200.60.26 (- Bangladesh)
2016-11-30 17:01Distribution SiteLocky
phucsang.com
ONLINENIC, INC.112.213.89.7 (- Vietnam)
2016-11-30 17:01Distribution SiteLocky
nuevarazajeans.com
WILD WEST DOMAINS, LLC64.95.245.110 (- United States)
2016-11-30 17:01Distribution SiteLocky
realearthproperties.in
GoDaddy.com, LLC (R101-AFIN)192.96.215.34 (- United States)
2016-11-30 17:01Distribution SiteLocky
pakcek.com
ENOM, INC.198.54.115.49 (- United States)
2016-11-30 17:01Distribution SiteLocky
padcha.com
GODADDY.COM, LLC148.66.136.7 (- Singapore)
2016-11-30 17:01Distribution SiteLocky
noosnegah.com
REALTIME REGISTER BV148.251.131.61 (- Germany)
2016-11-30 17:01Distribution SiteLocky
njhtpj.com
XIAMEN DOMAINS, INC. (n/a)
2016-11-30 17:00Distribution SiteLocky
ortus.com.mx
KIUBIX, S.A. de C.V.108.163.178.108 (- Canada)
2016-11-30 17:00Distribution SiteLocky
propfisher.com
BIGROCK SOLUTIONS LIMITED173.236.31.67 (- United States)
2016-11-30 17:00Distribution SiteLocky
premagro.ro
ICI - ROTLD176.223.208.18 (- Europe)
2016-11-30 17:00Distribution SiteLocky
panoramicprocurement.net
GODADDY.COM, LLC23.229.173.235 (- United States)
2016-11-30 17:00Distribution SiteLocky
power4speed.com
GODADDY.COM, LLC216.131.90.178 (- United States)
2016-11-30 17:00Distribution SiteLocky
outformat.com
GODADDY.COM, LLC52.0.180.15 (- United States) +1 A record(s) 52.6.86.86 (AS26496, - United States)
2016-11-30 16:59Distribution SiteLocky
pertclinic.com
GODADDY.COM, LLC166.62.28.112 (- United States)
2016-11-30 16:59Distribution SiteLocky
nikanels.pl
Consulting Service Sp. z o.o.194.181.122.225 (- Poland)
2016-11-30 16:59Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-30 16:59Distribution SiteLocky
profit-group.sk
80.94.52.72 (- Slovakia)
2016-11-30 16:59Distribution SiteLocky
paulking.it
OMNIBUS-REG151.1.182.231 (- Italy)
2016-11-30 16:59Distribution SiteLocky
njzhigaokt.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-30 16:58Distribution SiteLocky
qybest.cn
成都西维数码科技有限[...]116.255.218.36 (- China)
2016-11-30 16:58Distribution SiteLocky
pusulam.com.tr
94.73.147.54 (- Turkey)
2016-11-30 16:58Distribution SiteLocky
paronleather.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]180.92.182.23 (- Hong Kong)
2016-11-30 16:45Payment SiteCerber
pe2cku7pebkpgeko.ahovbr.top
Eranet International Limited (n/a)
2016-11-30 16:38Payment SiteCerber
avsxrcoq2q5fgrw2.y1fx4w.top
Eranet International Limited (n/a)
2016-11-30 13:27Payment SiteCerber
vyohacxzoue32vvk.mayrwf.top
Eranet International Limited (n/a)
2016-11-30 13:20Distribution SiteLocky
samaraorgsintez.ru
RU-CENTER-RU (n/a)
2016-11-30 13:20Distribution SiteLocky
samsebe.su
REGTIME-REG-FID (n/a)
2016-11-30 13:20Distribution SiteLocky
sallymills.com
PROMO PEOPLE, INC.104.31.74.137 (- United States) +1 A record(s) 104.31.75.137 (AS13335, - United States)
2016-11-30 13:20Distribution SiteLocky
rodneyagency.com
GODADDY.COM, LLC208.109.181.141 (- United States)
2016-11-30 13:20Distribution SiteLocky
raycon.ph
203.119.6.36 (- Philippines)
2016-11-30 13:20Distribution SiteLocky
sanjustoshopping.com.ar
200.68.105.93 (- Argentina)
2016-11-30 13:20Distribution SiteLocky
rescuemed.ca
Tucows.com Co.216.138.226.110 (- Canada)
2016-11-30 13:19Distribution SiteLocky
sam4x4.com
ENOM, INC. (n/a)
2016-11-30 13:19Distribution SiteLocky
rnitechnology.com
TUCOWS DOMAINS INC.69.90.160.250 (- Canada)
2016-11-30 13:19Distribution SiteLocky
s88.vdl.pl
Consulting Service Sp. z o.o.85.17.227.88 (- Netherlands)
2016-11-30 13:19Distribution SiteLocky
rotanatravel.com
1&1 INTERNET SE74.208.223.237 (- United States)
2016-11-30 13:19Distribution SiteLocky
sarayutechnologies.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-11-30 13:19Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-30 13:19Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-30 13:19Distribution SiteLocky
sbaky.com
GODADDY.COM, LLC50.63.202.49 (- United States)
2016-11-30 11:00Botnet C&CLocky
91.142.90.61
91.142.90.61 (- Russian Federation)
2016-11-30 10:57Botnet C&CLocky
95.213.195.123
95.213.195.123 (- Russian Federation)
2016-11-30 10:52Payment SiteCerber
avsxrcoq2q5fgrw2.5m2n7x.top
Eranet International Limited (n/a)
2016-11-30 10:11Payment SiteCerber
avsxrcoq2q5fgrw2.dgjpgy.top
Eranet International Limited (n/a)
2016-11-30 09:33Payment SiteCerber
vyohacxzoue32vvk.0ayn1s.top
Eranet International Limited (n/a)
2016-11-30 08:12Payment SiteCerber
avsxrcoq2q5fgrw2.lbxvhk.top
Eranet International Limited (n/a)
2016-11-30 08:11Payment SiteCerber
avsxrcoq2q5fgrw2.9c431m.bid
Eranet International Limited (n/a)
2016-11-29 22:37Payment SiteCerber
avsxrcoq2q5fgrw2.lxvmhm.top
Eranet International Limited (n/a)
2016-11-29 22:22Distribution SiteLocky
razborka-vigonka.ru
R01-RU81.177.141.213 (- Russian Federation)
2016-11-29 22:22Distribution SiteLocky
2012.rikschataxi.ch
217.26.54.17 (- Switzerland)
2016-11-29 22:22Distribution SiteLocky
sawadi.at
91.233.87.48 (- Germany)
2016-11-29 22:22Distribution SiteLocky
spunbaku.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 22:22Distribution SiteLocky
rao24gio.com
P.A. VIET NAM COMPANY LIMITED112.213.91.61 (- Vietnam)
2016-11-29 19:28Payment SiteCerber
pe2cku7pebkpgeko.hclz73.top
Eranet International Limited (n/a)
2016-11-29 18:43Payment SiteCerber
ffoqr3ug7m726zou.jye7lt.top
Eranet International Limited (n/a)
2016-11-29 15:50Distribution SiteLocky
pokerjive.com
TUCOWS DOMAINS INC.89.187.85.68 (- United Kingdom)
2016-11-29 15:50Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:50Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:50Distribution SiteLocky
manage.parafx.com
TUCOWS DOMAINS INC.69.57.0.4 (- Canada)
2016-11-29 15:50Distribution SiteLocky
inthiraspa.com
GODADDY.COM, LLC122.155.12.240 (- Thailand)
2016-11-29 15:50Distribution SiteLocky
hongruilight.com
DOMAIN.COM, LLC69.172.201.153 (- United States)
2016-11-29 15:49Distribution SiteLocky
palisandr38.ru
REGRU-RU138.68.112.80 (- Germany)
2016-11-29 15:49Distribution SiteLocky
radstedjazz.dk
93.191.155.240 (- Denmark)
2016-11-29 15:49Distribution SiteLocky
lanphuong.vn
112.213.85.78 (- Vietnam)
2016-11-29 15:49Distribution SiteLocky
pdaconference.com
GODADDY.COM, LLC160.153.129.203 (- United States)
2016-11-29 15:49Distribution SiteLocky
pgringette.ca
Promo People Inc.69.28.199.160 (- Canada)
2016-11-29 15:49Distribution SiteLocky
i12.ir
148.251.133.251 (- Germany)
2016-11-29 15:49Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.45.56.216.10 (- Canada)
2016-11-29 15:48Distribution SiteLocky
interdean.hu
95.131.66.24 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:48Distribution SiteLocky
netshot.co.uk
Mr Max Ramyar t/a Abel Internet78.33.15.234 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
keshuimei.com
GODADDY.COM, LLC107.151.181.40 (- United States)
2016-11-29 15:48Distribution SiteLocky
notyou.ru
R01-RU89.111.176.87 (- Russian Federation)
2016-11-29 15:48Distribution SiteLocky
ourfrontline.com
GODADDY.COM, LLC23.229.140.54 (- United States)
2016-11-29 15:48Distribution SiteLocky
oakscardclub.com
NETWORK SOLUTIONS, LLC.208.80.5.231 (- United States)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
ijiyo.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.196.252.15 (- China)
2016-11-29 15:48Distribution SiteLocky
komsutekstil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
lanchefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
ozka.ro
Nexus Media SRL188.215.251.97 (- Romania)
2016-11-29 15:47Distribution SiteLocky
paynterroofing.com
DOMAINPEOPLE, INC.216.110.144.158 (- United States)
2016-11-29 15:47Distribution SiteLocky
huduanjichuang.com
BIZCN.COM, INC. (n/a)
2016-11-29 15:47Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:47Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
hotelmm.ro
Romarg SRL86.106.30.71 (- Romania)
2016-11-29 15:47Distribution SiteLocky
iphoneservices.com.ua
(n/a)
2016-11-29 15:47Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:47Distribution SiteLocky
mckains.net
GODADDY.COM, LLC (n/a)

# of rows displayed: 100
# of entries in database: 12'974

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 >