Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-24 11:20Distribution SiteLocky
raje.dk
46.30.213.246 (- Denmark)
2016-11-24 11:20Distribution SiteLocky
prmiramar.com
ENOM, INC.187.73.33.58 (- Brazil)
2016-11-24 11:20Distribution SiteLocky
rightofdecimal.com
GODADDY.COM, LLC192.186.204.102 (- United States)
2016-11-24 11:20Distribution SiteLocky
poorten-derycke.be
My-Websitebuilder.com bvba185.18.9.143 (- Belgium)
2016-11-24 11:20Distribution SiteLocky
skgs.nl
Totaaldomein B.V.85.17.199.29 (- Netherlands)
2016-11-24 11:20Distribution SiteLocky
hundeschulegoerg.de
217.160.0.219 (- Germany)
2016-11-24 11:20Distribution SiteLocky
restauranttajmahal.ca
Promo People Inc. (n/a)
2016-11-24 11:19Distribution SiteLocky
phaleshop.com
ONLINENIC, INC.52.71.185.125 (- United States) +1 A record(s) 54.172.131.220 (AS40034, - United States)
2016-11-24 11:19Distribution SiteLocky
superagencja.eu
Michau Enterprises Limited85.128.200.200 (- Poland)
2016-11-24 11:19Distribution SiteLocky
pesaroeventi.it
OVH-REG (n/a)
2016-11-24 11:19Distribution SiteLocky
newskillacademy.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]204.11.56.48 (- Virgin Islands)
2016-11-24 11:19Distribution SiteLocky
procor.com.mx
Wild West Domains74.220.207.145 (- United States)
2016-11-24 11:19Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-24 11:19Distribution SiteLocky
soyyigit.com.tr
77.79.81.230 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
svcangel.com
GODADDY.COM, LLC107.180.44.152 (- United States)
2016-11-24 11:19Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
medicariel.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:19Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.45.63.10.218 (- United States)
2016-11-24 11:19Distribution SiteLocky
plast-chem.com.pl
INFO-CAL188.116.20.185 (- Poland)
2016-11-24 11:19Distribution SiteLocky
staging.santana.eu
Combell NV79.174.131.204 (- Belgium)
2016-11-24 11:19Distribution SiteLocky
somersetautotints.co.uk
eNom, Inc.5.133.180.146 (- United Kingdom)
2016-11-24 11:19Distribution SiteLocky
prizor.net
ENOM, INC. (n/a)
2016-11-24 11:19Distribution SiteLocky
szhuangming.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.15.63 (- Hong Kong)
2016-11-24 11:18Distribution SiteLocky
uae4all.com
NAME.COM, INC.151.80.243.50 (- France)
2016-11-24 11:18Distribution SiteLocky
rek-style.ru
REGRU-RU37.140.192.177 (- Russian Federation)
2016-11-24 11:18Distribution SiteLocky
readtogether.org.uk
123-Reg Limited t/a 123-reg94.136.40.103 (- United Kingdom)
2016-11-24 11:18Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...]173.254.28.102 (- United States)
2016-11-24 11:18Distribution SiteLocky
thoseads.com
GODADDY.COM, LLC199.79.54.237 (- United States)
2016-11-24 11:18Distribution SiteLocky
paultuttle.us
ENOM, INC.204.93.177.191 (- United States)
2016-11-24 11:18Distribution SiteLocky
muka.tnmrk.ru
REGRU-RU (n/a)
2016-11-24 11:18Distribution SiteLocky
turystyka.cal.pl
INFO-CAL91.185.191.163 (- Poland)
2016-11-24 11:11Distribution SiteLocky
markanltd.com
DOMAIN.COM, LLC212.175.247.30 (- Turkey)
2016-11-24 11:11Distribution SiteLocky
smolwow.ru
REGRU-RU194.58.56.96 (- Russian Federation)
2016-11-24 11:11Distribution SiteLocky
mospi.ru
REGTIME-RU91.221.37.14 (- Russian Federation)
2016-11-24 11:11Distribution SiteLocky
innsat.pl
Pro-Link147.135.201.64 (- France)
2016-11-24 11:11Distribution SiteLocky
adultmagstore.co.uk
123-Reg Limited t/a 123-reg185.2.4.92 (- Italy)
2016-11-24 11:10Distribution SiteLocky
sandiegoblindandshade.com
GODADDY.COM, LLC65.75.140.66 (- United States)
2016-11-24 11:10Distribution SiteLocky
hotloto.com
ENOM, INC.69.64.147.39 (- United States)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
michellemccarron.com
FASTDOMAIN, INC.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-11-24 11:10Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:10Distribution SiteLocky
mh500.com
TUCOWS DOMAINS INC.122.147.183.69 (- Taiwan)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:10Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:10Distribution SiteLocky
luke-woods.com
MESH DIGITAL LIMITED185.119.173.61 (- United Kingdom)
2016-11-24 11:09Distribution SiteLocky
ruf.com.ar
(n/a)
2016-11-24 11:09Distribution SiteLocky
TruePublish.de
144.76.56.233 (- Germany)
2016-11-24 11:09Distribution SiteLocky
jlxzy.net
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
mediclo.pl
Michau Enterprises Ltd.46.4.193.159 (- Germany)
2016-11-24 11:09Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
safety-speed.ru
NETHOUSE-RU5.9.21.140 (- Germany)
2016-11-24 11:09Distribution SiteLocky
trinechina.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.49 (- China)
2016-11-24 11:09Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:09Distribution SiteLocky
naarndonau.at
5.9.62.69 (- Germany)
2016-11-24 11:09Distribution SiteLocky
istanbulsoft.com.tr
93.187.206.11 (- Turkey)
2016-11-24 11:08Distribution SiteLocky
stroybal.ru
REGRU-RU212.86.102.70 (- Netherlands)
2016-11-24 11:08Distribution SiteLocky
musicphilicwinds.org
OnlineNIC Inc.103.254.210.99 (- Hong Kong)
2016-11-24 11:08Distribution SiteLocky
hupsoft.com
GODADDY.COM, LLC (n/a)
2016-11-24 11:08Distribution SiteLocky
izmirisgb.com
FBS INC. (n/a)
2016-11-24 11:08Distribution SiteLocky
julian-g.ro
Telekom Romania Communications S[...]86.35.15.215 (- Romania)
2016-11-24 11:08Distribution SiteLocky
muamusic.com
SHANGHAI BEST ORAY INFORMATION S[...] (n/a)
2016-11-24 11:08Distribution SiteLocky
stazilivio.it
TRINATEL-REG5.134.127.240 (- Italy)
2016-11-24 11:08Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:08Distribution SiteLocky
mogadk.ru
R01-RU81.177.135.253 (- Russian Federation)
2016-11-24 11:08Distribution SiteLocky
reaga.cz
REG-INTERNET-CZ46.13.12.162 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
maticelesnicka.cz
REG-IGNUM81.0.212.3 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
immobilienbegleitung.de
5.9.189.68 (- Germany)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
myhtar.ru
R01-RU185.26.121.147 (- Russian Federation)
2016-11-24 11:07Distribution SiteLocky
rcabaj.com.pl
home.pl S.A.188.128.200.161 (- Poland)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
kembarastation.com
TUCOWS DOMAINS INC. (n/a)
2016-11-24 11:07Distribution SiteLocky
hud3.net
MAT BAO TRADING & SERVICE COMPAN[...]103.74.120.173 (- Vietnam)
2016-11-24 11:07Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
iaam.com.br
191.6.200.97 (- Brazil)
2016-11-24 11:07Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-24 11:07Distribution SiteLocky
statikwerk.de
83.141.34.141 (- Germany)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
mtntelekom.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.217 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
mschroll.de
212.227.137.55 (- Germany)
2016-11-24 11:07Distribution SiteLocky
muzica-evenimente.ro
ICI - ROTLD85.204.19.232 (- Romania)
2016-11-24 11:07Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:06Distribution SiteLocky
structuralstonellc.com
WILD WEST DOMAINS, LLC162.244.253.58 (- United States)
2016-11-24 11:06Distribution SiteLocky
jingaiwang.com
BIZCN.COM, INC. (n/a)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:06Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
lacosanostra.co
NAME.COM LLC186.202.153.170 (- Brazil)
2016-11-24 11:06Distribution SiteLocky
www.limpotools.com
REGISTER.IT SPA95.110.158.131 (- Italy)
2016-11-24 11:06Distribution SiteLocky
stellaar.com
NETWORK SOLUTIONS, LLC.179.188.17.138 (- Brazil)
2016-11-24 11:06Distribution SiteLocky
jrockish.bravepages.com
REGISTER.COM, INC.66.219.202.10 (- United States)
2016-11-24 11:06Distribution SiteLocky
izmirisgb.com
FBS INC. (n/a)
2016-11-24 11:06Distribution SiteLocky
schmidtbauer.at
5.9.25.251 (- Germany)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
hqseconsulting.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.54.115.223 (- United States)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:06Distribution SiteLocky
sexexpo.ro
ICI - ROTLD93.122.132.142 (- Romania)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >