Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-28 10:23Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-28 10:23Distribution SiteLocky
modepiraten.com
CRONON AG81.169.145.68 (- Germany)
2016-11-28 10:23Distribution SiteLocky
lontion.net
WEST263 INTERNATIONAL LIMITED (n/a)
2016-11-28 10:23Distribution SiteLocky
mimatefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.95.17.60 (- United States)
2016-11-28 10:23Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:23Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-28 10:23Distribution SiteLocky
irenta.lt
UAB "Interneto vizija"79.98.28.19 (- Lithuania)
2016-11-28 10:23Distribution SiteLocky
milliner.ca
Tucows.com Co.67.205.125.33 (- Canada)
2016-11-28 10:22Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:22Distribution SiteLocky
misaho.com.ar
158.69.98.141 (- Canada)
2016-11-28 10:22Distribution SiteLocky
mizhibuluo.com
CHENGDU WEST DIMENSION DIGITAL T[...]123.1.174.186 (- Hong Kong)
2016-11-28 10:22Distribution SiteLocky
sinklinga.com
KEY-SYSTEMS GMBHn/a
2016-11-28 10:22Distribution SiteLocky
taotao500.cn
WEST263 INTERNATIONAL LIMITED (n/a)
2016-11-28 10:22Distribution SiteLocky
mib.tn
..........3s Globalnet137.74.170.8 (- France)
2016-11-28 10:22Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:22Distribution SiteLocky
kuszowka.pl
nazwa.pl sp. z o.o.185.5.98.127 (- Poland)
2016-11-28 10:21Distribution SiteLocky
jawar.eu
nazwa.pl sp. z o.o.91.90.173.31 (- Poland)
2016-11-28 10:21Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-28 10:21Distribution SiteLocky
isidore.be
AXC185.182.59.5 (- Netherlands)
2016-11-28 10:21Distribution SiteLocky
innogenap.com
TUCOWS DOMAINS INC.103.6.196.196 (- Malaysia)
2016-11-28 10:21Distribution SiteLocky
huishow.net
BIGROCK SOLUTIONS LIMITED (n/a)
2016-11-28 10:21Distribution SiteLocky
cadgewigan.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-28 10:21Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:21Distribution SiteLocky
holzschnitzereibinder.de
80.150.6.143 (- Germany)
2016-11-27 16:57Payment SiteCerber
ffoqr3ug7m726zou.bpuhab.top
Eranet International Limited (n/a)
2016-11-27 14:12Payment SiteCerber
avsxrcoq2q5fgrw2.zi842m.bid
Eranet International Limited (n/a)
2016-11-27 11:25Payment SiteCerber
avsxrcoq2q5fgrw2.vofy7f.top
Eranet International Limited (n/a)
2016-11-26 21:13Payment SiteCerber
ffoqr3ug7m726zou.b4abvx.top
Eranet International Limited (n/a)
2016-11-26 12:16Payment SiteCerber
lfdachijzuwx4bc4.af38vz.top
Eranet International Limited (n/a)
2016-11-26 11:20Payment SiteCerber
xrhwryizf5mui7a5.j4cser.bid
Eranet International Limited (n/a)
2016-11-26 09:17Payment SiteTorrentLocker
4w5wihkwyhsav2ha.payfactor.at
(n/a)
2016-11-26 01:33Payment SiteCerber
ffoqr3ug7m726zou.wx2n44.top
Eranet International Limited (n/a)
2016-11-25 22:38Payment SiteCerber
vyohacxzoue32vvk.w22p3v.top
Eranet International Limited (n/a)
2016-11-25 21:11Payment SiteCerber
vyohacxzoue32vvk.ibar8s.top
Eranet International Limited (n/a)
2016-11-25 20:56Payment SiteCerber
vyohacxzoue32vvk.dks71o.bid
Eranet International Limited (n/a)
2016-11-25 16:11Payment SiteCerber
vyohacxzoue32vvk.ean5e7.top
Eranet International Limited (n/a)
2016-11-25 15:48Payment SiteCerber
vyohacxzoue32vvk.xy2rlg.bid
Eranet International Limited (n/a)
2016-11-25 13:48Distribution SiteLocky
tingfenglou.orgfree.com
NETEARTH ONE INC. D/B/A NETEARTH10.6.139.112 (n/a)
2016-11-25 13:48Distribution SiteLocky
songpulatex.com
BEIJING INNOVATIVE LINKAGE TECHN[...] (n/a)
2016-11-25 13:48Distribution SiteLocky
stomatolog-implant.ro
Claus Web SRL85.9.63.159 (- Romania)
2016-11-25 13:48Distribution SiteLocky
theoneworld.in
Name.com LLC (R65-AFIN)69.64.83.206 (- United States)
2016-11-25 13:48Distribution SiteLocky
pesaroeventi.it
OVH-REG (n/a)
2016-11-25 13:48Distribution SiteLocky
unimarket.ch
80.246.50.133 (- Germany)
2016-11-25 13:48Distribution SiteLocky
sineria.com
KEY-SYSTEMS GMBH91.134.171.210 (- Netherlands)
2016-11-25 13:48Distribution SiteLocky
trebleimp.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.44.204 (- Thailand)
2016-11-25 13:48Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-25 13:47Distribution SiteLocky
sallymills.com
PROMO PEOPLE, INC.104.31.74.137 (- United States) +1 A record(s) 104.31.75.137 (AS13335, - United States)
2016-11-25 13:47Distribution SiteLocky
tarasarl.com
GODADDY.COM, LLC104.27.132.97 (- United States) +1 A record(s) 104.27.133.97 (AS13335, - United States)
2016-11-25 13:47Distribution SiteLocky
shydnt.com
BIZCN.COM, INC. (n/a)
2016-11-25 13:47Distribution SiteLocky
reginaautoauction.com
GODADDY.COM, LLC69.28.199.130 (- Canada)
2016-11-25 13:47Distribution SiteLocky
nxarab.net
DOMAIN.COM, LLC122.114.178.211 (- China)
2016-11-25 13:47Distribution SiteLocky
sayvir.com
OVH (n/a)
2016-11-25 13:47Distribution SiteLocky
tyfastener.com
GODADDY.COM, LLC106.185.53.205 (- Japan)
2016-11-25 13:47Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-25 13:47Distribution SiteLocky
sunekitty.com
TUCOWS DOMAINS INC.219.118.71.137 (- Japan)
2016-11-25 13:47Distribution SiteLocky
stevetoulch.com
GODADDY.COM, LLC104.152.168.26 (- Canada)
2016-11-25 13:46Distribution SiteLocky
shenzhensh.com
CHENGDU WEST DIMENSION DIGITAL T[...]43.249.2.106 (- China)
2016-11-25 13:46Distribution SiteLocky
sabinemerz.nl
Nouzelle B.V.87.119.194.135 (- Netherlands)
2016-11-25 13:46Distribution SiteLocky
sujiaotuoban.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.218 (- China)
2016-11-25 13:46Distribution SiteLocky
satherm.pt
80.172.235.175 (- Portugal)
2016-11-25 13:46Distribution SiteLocky
portalkerjaya.com
NAME.COM, INC.198.54.116.94 (- United States)
2016-11-25 13:46Distribution SiteLocky
tolga-tosun.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-11-25 13:46Distribution SiteLocky
pornolartv.net
GODADDY.COM, LLC (n/a)
2016-11-25 13:46Distribution SiteLocky
pulse-tv.net
DYNADOT, LLC89.248.162.181 (- Seychelles)
2016-11-25 13:46Distribution SiteLocky
puttechnologies.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.186.242.166 (- United States)
2016-11-25 13:46Distribution SiteLocky
setoxy.com
P.A. VIET NAM COMPANY LIMITED112.213.91.61 (- Vietnam)
2016-11-25 13:46Distribution SiteLocky
asrcargo.ru
R01-RU95.213.196.126 (- Russian Federation)
2016-11-25 13:46Distribution SiteLocky
sinmotor.com
ENOM, INC.61.7.236.40 (- Thailand)
2016-11-25 13:46Distribution SiteLocky
sp-tulun.ru
REGRU-RU194.58.92.129 (- Russian Federation)
2016-11-25 13:46Distribution SiteLocky
vanaken.nu
Hosting Concepts81.18.172.55 (- Netherlands)
2016-11-25 13:45Distribution SiteLocky
saintsraw.com
GODADDY.COM, LLC50.63.202.50 (- United States)
2016-11-25 13:45Distribution SiteLocky
square100.com
GODADDY.COM, LLC198.57.207.39 (- United States)
2016-11-25 13:45Distribution SiteLocky
richcity.net
DOMAIN.COM, LLC173.208.133.37 (- United States)
2016-11-25 13:45Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...]173.254.28.102 (- United States)
2016-11-25 13:45Distribution SiteLocky
sreekrishnatemple.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-25 13:45Distribution SiteLocky
soonmarketing.com
GODADDY.COM, LLC198.11.175.140 (- United States)
2016-11-25 13:45Distribution SiteLocky
sipho.es
86.109.162.16 (- Spain)
2016-11-25 13:45Distribution SiteLocky
thoraxcenter.ru
AGAVA-RU31.31.196.106 (- Russian Federation)
2016-11-25 13:44Distribution SiteLocky
ruwechat.ru
REGRU-RU (n/a)
2016-11-25 13:44Distribution SiteLocky
swkitchens.com.au
Web Address Registration203.170.86.89 (- Australia)
2016-11-25 13:44Distribution SiteLocky
ruchengfcw.com
CHENGDU WEST DIMENSION DIGITAL T[...]209.99.64.18 (- United States)
2016-11-25 13:38Payment SiteCerber
vyohacxzoue32vvk.zz3w5l.bid
Eranet International Limited (n/a)
2016-11-25 13:19Payment SiteCerber
vyohacxzoue32vvk.1m47ka.bid
Eranet International Limited (n/a)
2016-11-25 10:45Distribution SiteLocky
semeystvo.com.ua
185.68.16.177 (- Ukraine)
2016-11-25 10:45Distribution SiteLocky
prongai.com
ONLINENIC, INC.59.152.207.106 (- Hong Kong)
2016-11-25 10:44Distribution SiteLocky
vmeste-hudeem.ru
REGRU-RU (n/a)
2016-11-25 10:44Distribution SiteLocky
sydayont.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 10:43Distribution SiteLocky
right-livelihoods.org
PDR Ltd. d/b/a PublicDomainRegis[...]163.44.198.41 (- Thailand)
2016-11-25 10:43Distribution SiteLocky
supplyglassess.com
ENOM, INC. (n/a)
2016-11-25 10:43Distribution SiteLocky
thegarageteam.gr
178.32.154.18 (- France)
2016-11-25 10:43Distribution SiteLocky
uzmanfren.com.tr
93.186.120.141 (- Turkey)
2016-11-25 10:43Distribution SiteLocky
signumtte.net
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.50 (- Turkey)
2016-11-25 10:42Distribution SiteLocky
hylegmassy.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 10:42Distribution SiteLocky
premierpromotions.co.uk
UK2 Limited217.154.116.196 (- United Kingdom)
2016-11-25 10:42Distribution SiteLocky
videobandnaardvd.com
KEY-SYSTEMS GMBH149.210.164.149 (- Netherlands)
2016-11-25 10:41Distribution SiteLocky
ryrszs.com
BEIJING INNOVATIVE LINKAGE TECHN[...]144.48.4.188 (- Hong Kong)
2016-11-25 10:41Distribution SiteLocky
hylegmassy.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 10:41Distribution SiteLocky
tehrankhabar.ir
185.55.224.4 (- Iran)
2016-11-25 10:40Distribution SiteLocky
jackybrith.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-25 10:40Distribution SiteLocky
velolenta.com
NAME.COM, INC. (n/a)

# of rows displayed: 100
# of entries in database: 12'876

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >