Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-30 13:20Distribution SiteLocky
sallymills.com
PROMO PEOPLE, INC.104.31.74.137 (- United States) +1 A record(s) 104.31.75.137 (AS13335, - United States)
2016-11-30 13:20Distribution SiteLocky
rodneyagency.com
GODADDY.COM, LLC208.109.181.141 (- United States)
2016-11-30 13:20Distribution SiteLocky
raycon.ph
203.119.6.36 (- Philippines)
2016-11-30 13:20Distribution SiteLocky
sanjustoshopping.com.ar
200.68.105.93 (- Argentina)
2016-11-30 13:20Distribution SiteLocky
rescuemed.ca
Tucows.com Co.216.138.226.110 (- Canada)
2016-11-30 13:19Distribution SiteLocky
sam4x4.com
ENOM, INC.198.54.126.121 (- United States)
2016-11-30 13:19Distribution SiteLocky
rnitechnology.com
TUCOWS DOMAINS INC.69.90.160.250 (- Canada)
2016-11-30 13:19Distribution SiteLocky
s88.vdl.pl
Consulting Service Sp. z o.o.85.17.227.88 (- Netherlands)
2016-11-30 13:19Distribution SiteLocky
rotanatravel.com
1&1 INTERNET SE74.208.223.237 (- United States)
2016-11-30 13:19Distribution SiteLocky
sarayutechnologies.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-11-30 13:19Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-30 13:19Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-30 13:19Distribution SiteLocky
sbaky.com
GODADDY.COM, LLC184.168.221.36 (- United States)
2016-11-30 11:00Botnet C&CLocky
91.142.90.61
91.142.90.61 (- Russian Federation)
2016-11-30 10:57Botnet C&CLocky
95.213.195.123
95.213.195.123 (- Russian Federation)
2016-11-30 10:52Payment SiteCerber
avsxrcoq2q5fgrw2.5m2n7x.top
Eranet International Limited (n/a)
2016-11-30 10:11Payment SiteCerber
avsxrcoq2q5fgrw2.dgjpgy.top
Eranet International Limited (n/a)
2016-11-30 09:33Payment SiteCerber
vyohacxzoue32vvk.0ayn1s.top
Eranet International Limited (n/a)
2016-11-30 08:12Payment SiteCerber
avsxrcoq2q5fgrw2.lbxvhk.top
Eranet International Limited (n/a)
2016-11-30 08:11Payment SiteCerber
avsxrcoq2q5fgrw2.9c431m.bid
Eranet International Limited (n/a)
2016-11-29 22:37Payment SiteCerber
avsxrcoq2q5fgrw2.lxvmhm.top
Eranet International Limited (n/a)
2016-11-29 22:22Distribution SiteLocky
razborka-vigonka.ru
R01-RU81.177.141.213 (- Russian Federation)
2016-11-29 22:22Distribution SiteLocky
2012.rikschataxi.ch
217.26.54.17 (- Switzerland)
2016-11-29 22:22Distribution SiteLocky
sawadi.at
91.233.87.48 (- Germany)
2016-11-29 22:22Distribution SiteLocky
spunbaku.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 22:22Distribution SiteLocky
rao24gio.com
P.A. VIET NAM COMPANY LIMITED42.112.38.110 (- Vietnam)
2016-11-29 19:28Payment SiteCerber
pe2cku7pebkpgeko.hclz73.top
Eranet International Limited (n/a)
2016-11-29 18:43Payment SiteCerber
ffoqr3ug7m726zou.jye7lt.top
Eranet International Limited (n/a)
2016-11-29 15:50Distribution SiteLocky
pokerjive.com
TUCOWS DOMAINS INC.89.187.85.68 (- United Kingdom)
2016-11-29 15:50Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:50Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:50Distribution SiteLocky
manage.parafx.com
TUCOWS DOMAINS INC.69.57.0.4 (- Canada)
2016-11-29 15:50Distribution SiteLocky
inthiraspa.com
GODADDY.COM, LLC122.155.12.240 (- Thailand)
2016-11-29 15:50Distribution SiteLocky
hongruilight.com
DOMAIN.COM, LLC209.99.64.52 (- United States)
2016-11-29 15:49Distribution SiteLocky
palisandr38.ru
REGRU-RU138.68.112.80 (- Germany)
2016-11-29 15:49Distribution SiteLocky
radstedjazz.dk
93.191.155.240 (- Denmark)
2016-11-29 15:49Distribution SiteLocky
lanphuong.vn
112.213.85.78 (- Vietnam)
2016-11-29 15:49Distribution SiteLocky
pdaconference.com
GODADDY.COM, LLC160.153.129.203 (- United States)
2016-11-29 15:49Distribution SiteLocky
pgringette.ca
Promo People Inc.69.28.199.160 (- Canada)
2016-11-29 15:49Distribution SiteLocky
i12.ir
148.251.133.251 (- Germany)
2016-11-29 15:49Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.45.56.216.10 (- Canada)
2016-11-29 15:48Distribution SiteLocky
interdean.hu
95.131.66.24 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:48Distribution SiteLocky
netshot.co.uk
Mr Max Ramyar t/a Abel Internet78.33.15.234 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
keshuimei.com
GODADDY.COM, LLC128.1.241.80 (- United States)
2016-11-29 15:48Distribution SiteLocky
notyou.ru
R01-RU89.111.176.87 (- Russian Federation)
2016-11-29 15:48Distribution SiteLocky
ourfrontline.com
GODADDY.COM, LLC23.229.140.54 (- United States)
2016-11-29 15:48Distribution SiteLocky
oakscardclub.com
NETWORK SOLUTIONS, LLC.208.80.5.231 (- United States)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
ijiyo.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.196.252.15 (- China)
2016-11-29 15:48Distribution SiteLocky
komsutekstil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
lanchefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
ozka.ro
Nexus Media SRL188.215.251.97 (- Romania)
2016-11-29 15:47Distribution SiteLocky
paynterroofing.com
DOMAINPEOPLE, INC.216.110.144.158 (- United States)
2016-11-29 15:47Distribution SiteLocky
huduanjichuang.com
BIZCN.COM, INC.23.82.42.195 (- United States)
2016-11-29 15:47Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:47Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
hotelmm.ro
Romarg SRL86.106.30.71 (- Romania)
2016-11-29 15:47Distribution SiteLocky
iphoneservices.com.ua
(n/a)
2016-11-29 15:47Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:47Distribution SiteLocky
mckains.net
GODADDY.COM, LLC (n/a)
2016-11-29 15:46Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:46Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:46Distribution SiteLocky
ninjah47.home.pl
home.pl S.A.89.161.251.44 (- Poland)
2016-11-29 15:46Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:46Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:46Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:46Distribution SiteLocky
mirofusion.com
TUCOWS DOMAINS INC.72.51.24.224 (- United States)
2016-11-29 15:46Distribution SiteLocky
rosispitaniya.com
KEY-SYSTEMS GMBH93.95.102.221 (- Russian Federation)
2016-11-29 15:46Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-11-29 15:46Distribution SiteLocky
kjdot.com
HICHINA ZHICHENG TECHNOLOGY LTD.115.28.221.203 (- China)
2016-11-29 15:45Distribution SiteLocky
mooymedia.nl
Fast DRS188.227.200.134 (- Netherlands)
2016-11-29 15:45Distribution SiteLocky
palekar.com
TOTAL WEB SOLUTIONS LIMITED TRAD[...]91.109.14.192 (- United Kingdom)
2016-11-29 15:45Distribution SiteLocky
mmbeheer.nl
The Registrar Company B.V.178.19.114.59 (- Netherlands)
2016-11-29 15:45Distribution SiteLocky
jbec.kz
KAZNIC193.29.53.136 (- Kazakhstan)
2016-11-29 15:45Distribution SiteLocky
omrolsztyn.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-11-29 15:45Distribution SiteLocky
portalmadureira.com
ENOM, INC.192.99.63.227 (- Canada)
2016-11-29 15:45Distribution SiteLocky
ponticulus.eu
Zitcom A/S94.231.103.93 (- Denmark)
2016-11-29 15:45Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:45Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:45Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:45Distribution SiteLocky
pathkids.com
TUCOWS DOMAINS INC.69.90.160.150 (- Canada)
2016-11-29 15:44Distribution SiteLocky
megalingeriemall.com
GODADDY.COM, LLC (n/a)
2016-11-29 15:44Distribution SiteLocky
islandspirits.ca
Tucows.com Co. (n/a)
2016-11-29 15:44Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:44Distribution SiteLocky
kashimayunohana.jp
180.222.89.24 (- Japan)
2016-11-29 15:44Distribution SiteLocky
ltinvest.de
(n/a)
2016-11-29 15:44Distribution SiteLocky
microsupport.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.37.35.84 (- United States)
2016-11-29 15:44Distribution SiteLocky
rent-guarantee-insurance.co.uk
Redcentric Solutions Ltd t/a Red[...]217.72.181.189 (- United Kingdom)
2016-11-29 15:44Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:44Distribution SiteLocky
protescil.net
GODADDY.COM, LLC84.51.23.5 (- Turkey)
2016-11-29 15:44Distribution SiteLocky
liceuminbak.com
WHOISNETWORKS CO., LTD. (n/a)
2016-11-29 15:44Distribution SiteLocky
huaphoto.net
CHENGDU WEST DIMENSION DIGITAL T[...]192.161.86.173 (- United States)
2016-11-29 15:43Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 13:06Payment SiteCerber
ffoqr3ug7m726zou.kfymbh.top
Eranet International Limited (n/a)
2016-11-29 10:49Payment SiteCerber
avsxrcoq2q5fgrw2.rys9pj.top
Eranet International Limited (n/a)
2016-11-29 09:48Payment SiteCerber
avsxrcoq2q5fgrw2.yr1h37.top
Eranet International Limited (n/a)
2016-11-29 09:33Distribution SiteLocky
sp-tulun.ru
REGRU-RU194.58.92.129 (- Russian Federation)

# of rows displayed: 100
# of entries in database: 12'877

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >