Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-25 06:24Distribution SiteLocky
merchhora.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-25 06:24Distribution SiteLocky
vesan.info
PDR Ltd. d/b/a PublicDomainRegis[...]87.120.40.131 (- Bulgaria)
2016-11-25 06:24Distribution SiteLocky
rerda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]174.142.8.200 (- Canada)
2016-11-25 06:24Distribution SiteLocky
use-inc.tv
NETWORK SOLUTIONS, LLC.153.231.254.213 (- Japan)
2016-11-25 06:24Distribution SiteLocky
stservis14.ru
R01-RU92.53.114.85 (- Russian Federation)
2016-11-25 06:24Distribution SiteLocky
cafiztarea.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-25 06:24Distribution SiteLocky
rapidnet.ir
5.57.38.11 (- Iran)
2016-11-25 06:23Distribution SiteLocky
ruangmobil.com
CV. JOGJACAMP49.0.1.156 (- Indonesia)
2016-11-25 06:23Distribution SiteLocky
tdtrading.nl
Mijn InternetOplossing B.V.94.75.249.24 (- Netherlands)
2016-11-25 06:23Distribution SiteLocky
bootyculla.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-25 06:23Distribution SiteLocky
cafiztarea.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-25 06:23Distribution SiteLocky
placezebub.net
KEY-SYSTEMS GMBH (n/a)
2016-11-25 06:23Distribution SiteLocky
restauranttajmahal.ca
Promo People Inc. (n/a)
2016-11-25 06:23Distribution SiteLocky
jinghaishipin.com
HICHINA ZHICHENG TECHNOLOGY LTD.118.193.203.184 (- China)
2016-11-25 03:52Payment SiteCerber
vyohacxzoue32vvk.5m2n7x.top
Eranet International Limited (n/a)
2016-11-24 20:08Botnet C&CLocky
pdlbtnfhtoxghb.org
Dynadot, LLC69.195.129.70 (- United States)
2016-11-24 16:20Payment SiteCerber
ffoqr3ug7m726zou.v0xn1i.bid
Eranet International Limited (n/a)
2016-11-24 15:56Payment SiteCerber
ffoqr3ug7m726zou.zu3fzc.bid
Eranet International Limited (n/a)
2016-11-24 11:20Distribution SiteLocky
phukiengalaxy.com
ONLINENIC, INC.123.30.171.115 (- Vietnam)
2016-11-24 11:20Distribution SiteLocky
rimiller.com
GODADDY.COM, LLC50.87.249.123 (- United States)
2016-11-24 11:20Distribution SiteLocky
raihaan.com
ENOM, INC.74.220.202.31 (- United States)
2016-11-24 11:20Distribution SiteLocky
raje.dk
46.30.213.246 (- Denmark)
2016-11-24 11:20Distribution SiteLocky
prmiramar.com
ENOM, INC.187.73.33.61 (- Brazil)
2016-11-24 11:20Distribution SiteLocky
rightofdecimal.com
GODADDY.COM, LLC192.186.204.102 (- United States)
2016-11-24 11:20Distribution SiteLocky
poorten-derycke.be
My-Websitebuilder.com bvba185.18.9.143 (- Netherlands)
2016-11-24 11:20Distribution SiteLocky
skgs.nl
Totaaldomein B.V.85.17.199.29 (- Netherlands)
2016-11-24 11:20Distribution SiteLocky
hundeschulegoerg.de
217.160.0.219 (- Germany)
2016-11-24 11:20Distribution SiteLocky
restauranttajmahal.ca
Promo People Inc. (n/a)
2016-11-24 11:19Distribution SiteLocky
phaleshop.com
ONLINENIC, INC.52.204.129.22 (- United States) +1 A record(s) 54.85.127.70 (AS40034, - United States)
2016-11-24 11:19Distribution SiteLocky
superagencja.eu
Michau Enterprises Limited85.128.200.200 (- Poland)
2016-11-24 11:19Distribution SiteLocky
pesaroeventi.it
OVH-REG (n/a)
2016-11-24 11:19Distribution SiteLocky
newskillacademy.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-24 11:19Distribution SiteLocky
procor.com.mx
Wild West Domains192.185.134.36 (- United States)
2016-11-24 11:19Distribution SiteLocky
facerecognition.com.ba
195.222.33.173 (- Bosnia and Herzegovina)
2016-11-24 11:19Distribution SiteLocky
soyyigit.com.tr
77.79.81.230 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
svcangel.com
GODADDY.COM, LLC107.180.44.152 (- United States)
2016-11-24 11:19Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
medicariel.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:19Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.45.63.10.218 (- United States)
2016-11-24 11:19Distribution SiteLocky
plast-chem.com.pl
INFO-CAL188.116.20.185 (- Poland)
2016-11-24 11:19Distribution SiteLocky
staging.santana.eu
Combell NV79.174.131.204 (- Netherlands)
2016-11-24 11:19Distribution SiteLocky
somersetautotints.co.uk
eNom, Inc.5.133.180.146 (- United Kingdom)
2016-11-24 11:19Distribution SiteLocky
prizor.net
ENOM, INC.92.60.224.56 (- Serbia)
2016-11-24 11:19Distribution SiteLocky
szhuangming.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.15.63 (- Canada)
2016-11-24 11:18Distribution SiteLocky
uae4all.com
NAME.COM, INC.151.80.243.50 (- France)
2016-11-24 11:18Distribution SiteLocky
rek-style.ru
REGRU-RU37.140.192.177 (- Russian Federation)
2016-11-24 11:18Distribution SiteLocky
readtogether.org.uk
123-Reg Limited t/a 123-reg94.136.40.103 (- United Kingdom)
2016-11-24 11:18Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...]173.254.28.102 (- United States)
2016-11-24 11:18Distribution SiteLocky
thoseads.com
GODADDY.COM, LLC199.79.54.237 (- United States)
2016-11-24 11:18Distribution SiteLocky
paultuttle.us
ENOM, INC.204.93.177.191 (- United States)
2016-11-24 11:18Distribution SiteLocky
muka.tnmrk.ru
REGRU-RU (n/a)
2016-11-24 11:18Distribution SiteLocky
turystyka.cal.pl
INFO-CAL91.185.191.163 (- Poland)
2016-11-24 11:11Distribution SiteLocky
markanltd.com
DOMAIN.COM, LLC212.175.247.30 (- Turkey)
2016-11-24 11:11Distribution SiteLocky
smolwow.ru
REGRU-RU46.105.212.150 (- France)
2016-11-24 11:11Distribution SiteLocky
mospi.ru
REGTIME-RU91.221.37.14 (- Russian Federation)
2016-11-24 11:11Distribution SiteLocky
innsat.pl
Pro-Link147.135.201.64 (- United States)
2016-11-24 11:11Distribution SiteLocky
adultmagstore.co.uk
123-Reg Limited t/a 123-reg185.2.4.92 (- Italy)
2016-11-24 11:10Distribution SiteLocky
sandiegoblindandshade.com
GODADDY.COM, LLC65.75.140.66 (- United States)
2016-11-24 11:10Distribution SiteLocky
hotloto.com
ENOM, INC.92.63.111.186 (- Belgium)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
michellemccarron.com
FASTDOMAIN, INC.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-11-24 11:10Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:10Distribution SiteLocky
mh500.com
TUCOWS DOMAINS INC.122.147.183.69 (- Taiwan)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:10Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:10Distribution SiteLocky
luke-woods.com
MESH DIGITAL LIMITED185.119.173.61 (- United Kingdom)
2016-11-24 11:09Distribution SiteLocky
ruf.com.ar
107.180.41.45 (- United States)
2016-11-24 11:09Distribution SiteLocky
TruePublish.de
144.76.56.233 (- Germany)
2016-11-24 11:09Distribution SiteLocky
jlxzy.net
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
mediclo.pl
Michau Enterprises Ltd.46.4.193.159 (- Germany)
2016-11-24 11:09Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
safety-speed.ru
NETHOUSE-RU5.9.21.140 (- Germany)
2016-11-24 11:09Distribution SiteLocky
trinechina.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.49 (- China)
2016-11-24 11:09Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:09Distribution SiteLocky
naarndonau.at
5.9.62.69 (- Germany)
2016-11-24 11:09Distribution SiteLocky
istanbulsoft.com.tr
93.187.206.11 (- Turkey)
2016-11-24 11:08Distribution SiteLocky
stroybal.ru
REGRU-RU212.86.102.70 (- Ukraine)
2016-11-24 11:08Distribution SiteLocky
musicphilicwinds.org
OnlineNIC Inc.103.254.210.99 (- Hong Kong)
2016-11-24 11:08Distribution SiteLocky
hupsoft.com
GODADDY.COM, LLC50.63.202.56 (- United States)
2016-11-24 11:08Distribution SiteLocky
izmirisgb.com
FBS INC.77.245.155.239 (- Turkey)
2016-11-24 11:08Distribution SiteLocky
julian-g.ro
Telekom Romania Communications S[...]86.35.15.215 (- Romania)
2016-11-24 11:08Distribution SiteLocky
muamusic.com
SHANGHAI BEST ORAY INFORMATION S[...] (n/a)
2016-11-24 11:08Distribution SiteLocky
stazilivio.it
TRINATEL-REG5.134.127.240 (- Italy)
2016-11-24 11:08Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:08Distribution SiteLocky
mogadk.ru
R01-RU81.177.135.253 (- Russian Federation)
2016-11-24 11:08Distribution SiteLocky
reaga.cz
REG-INTERNET-CZ46.13.12.162 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
maticelesnicka.cz
REG-IGNUM81.0.212.3 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
immobilienbegleitung.de
5.9.189.68 (- Germany)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
myhtar.ru
R01-RU185.26.121.147 (- Russian Federation)
2016-11-24 11:07Distribution SiteLocky
rcabaj.com.pl
home.pl S.A.188.128.200.161 (- Poland)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
kembarastation.com
TUCOWS DOMAINS INC. (n/a)
2016-11-24 11:07Distribution SiteLocky
hud3.net
MAT BAO TRADING & SERVICE COMPAN[...]103.74.120.173 (- Viet Nam)
2016-11-24 11:07Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
iaam.com.br
191.6.200.97 (- Brazil)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >