Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-24 11:07Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-24 11:07Distribution SiteLocky
statikwerk.de
83.141.34.141 (- Germany)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
mtntelekom.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.217 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
mschroll.de
212.227.137.55 (- Germany)
2016-11-24 11:07Distribution SiteLocky
muzica-evenimente.ro
ICI - ROTLD85.204.19.232 (- Romania)
2016-11-24 11:07Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:06Distribution SiteLocky
structuralstonellc.com
WILD WEST DOMAINS, LLC162.244.253.58 (- United States)
2016-11-24 11:06Distribution SiteLocky
jingaiwang.com
BIZCN.COM, INC. (n/a)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:06Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
lacosanostra.co
NAME.COM LLC186.202.153.170 (- Brazil)
2016-11-24 11:06Distribution SiteLocky
www.limpotools.com
REGISTER.IT SPA95.110.158.131 (- Italy)
2016-11-24 11:06Distribution SiteLocky
stellaar.com
NETWORK SOLUTIONS, LLC.179.188.17.138 (- Brazil)
2016-11-24 11:06Distribution SiteLocky
jrockish.bravepages.com
REGISTER.COM, INC.66.219.202.10 (- United States)
2016-11-24 11:06Distribution SiteLocky
izmirisgb.com
FBS INC.77.245.155.239 (- Turkey)
2016-11-24 11:06Distribution SiteLocky
schmidtbauer.at
5.9.25.251 (- Germany)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
hqseconsulting.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.54.115.223 (- United States)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-24 11:06Distribution SiteLocky
sexexpo.ro
ICI - ROTLD93.122.132.142 (- Romania)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 09:48Payment SiteCerber
vyohacxzoue32vvk.p9su2u.top
Eranet International Limited (n/a)
2016-11-24 05:30Payment SiteCerber
vyohacxzoue32vvk.d7h6yx.top
Eranet International Limited (n/a)
2016-11-24 02:14Payment SiteCerber
ahuqfrqk54v3vnzj.bds4sn.top
Eranet International Limited (n/a)
2016-11-24 00:51Payment SiteCerber
vyohacxzoue32vvk.ac7zvz.top
Eranet International Limited (n/a)
2016-11-23 21:55Payment SiteCerber
xrhwryizf5mui7a5.vgxcci.top
Eranet International Limited (n/a)
2016-11-23 20:07Botnet C&CLocky
91.211.119.98
91.211.119.98 (- Ukraine)
2016-11-23 19:43Payment SiteCerber
ahuqfrqk54v3vnzj.4h16v3.top
Eranet International Limited (n/a)
2016-11-23 19:14Botnet C&CLocky
95.46.114.205
95.46.114.205 (- Czech Republic)
2016-11-23 18:59Distribution SiteLocky
mdk-wear.ru
REGTIME-RU141.8.194.161 (- Russian Federation)
2016-11-23 18:59Distribution SiteLocky
nicputeec.com
REGIONAL NETWORK INFORMATION CEN[...]91.226.93.18 (- Russian Federation)
2016-11-23 18:59Distribution SiteLocky
obsidian.cl
201.238.211.150 (- Chile)
2016-11-23 18:59Distribution SiteLocky
golden-bereg.ru
RU-CENTER-RU109.70.26.37 (- Russian Federation) +1 A record(s) 194.85.61.76 (AS48287, - Russian Federation)
2016-11-23 18:59Distribution SiteLocky
facerecognition.com.ba
195.222.33.173 (- Bosnia and Herzegovina)
2016-11-23 18:58Distribution SiteLocky
masterimob.ro
ICI - ROTLD188.214.21.152 (- Romania)
2016-11-23 18:58Distribution SiteLocky
muricreklamcilik.com
FBS INC.94.73.147.210 (- Turkey)
2016-11-23 18:58Distribution SiteLocky
noisecontrols.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]104.223.48.221 (- United States)
2016-11-23 18:58Distribution SiteLocky
kolumbia.free.bg
Free - St. Petrova ET188.40.80.188 (- Germany)
2016-11-23 18:57Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:57Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:57Distribution SiteLocky
dhmodel.cz
REG-ACTIVE2489.185.225.40 (- Czech Republic)
2016-11-23 18:57Distribution SiteLocky
interprofil.no
(n/a)
2016-11-23 18:57Distribution SiteLocky
gremr.ma
GENIOUS COMMUNICATION (n/a)
2016-11-23 18:57Distribution SiteLocky
kleansys.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]67.222.148.212 (- United States)
2016-11-23 18:56Distribution SiteLocky
hightradingfrequency.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-11-23 18:56Distribution SiteLocky
gadgetdealz.net
GODADDY.COM, LLC (n/a)
2016-11-23 18:56Distribution SiteLocky
gomuskegon.mobi
GoDaddy.com, LLC74.50.13.127 (- United States)
2016-11-23 18:56Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:56Distribution SiteLocky
gold-or.ca
Webnames.ca Inc.104.37.35.81 (- United States)
2016-11-23 18:56Distribution SiteLocky
orthoskin.com
CRONON AG81.169.145.80 (- Germany)
2016-11-23 18:55Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:54Distribution SiteLocky
greentic.univcasa.ma
MEDI TELECOM196.200.165.11 (- Morocco)
2016-11-23 18:54Distribution SiteLocky
musicrecruiting.com
GODADDY.COM, LLC192.230.81.195 (- United States) +1 A record(s) 199.83.134.195 (AS26496, - United States)
2016-11-23 18:54Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:54Distribution SiteLocky
gpsfiles.nl
TransIP BV185.10.48.165 (- Netherlands)
2016-11-23 18:53Distribution SiteLocky
heatsavingsystems.com
GODADDY.COM, LLC90.156.201.100 (- Russian Federation) +3 A record(s) 90.156.201.111 (AS25532, - Russian Federation)
90.156.201.116 (AS25532, - Russian Federation)
90.156.201.59 (AS25532, - Russian Federation)
2016-11-23 18:53Distribution SiteLocky
panificadoraavenida.com
MARCARIA.COM, INTERNATIONAL, INC[...]107.6.144.42 (- United States)
2016-11-23 18:53Distribution SiteLocky
rentalpark.com.ar
200.80.52.117 (- Colombia)
2016-11-23 18:53Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:53Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:53Distribution SiteLocky
iwebsdns.com
DNC HOLDINGS, INC. (n/a)
2016-11-23 18:52Distribution SiteLocky
markscheffel.de
212.227.228.103 (- Germany)
2016-11-23 18:52Distribution SiteLocky
peruincoming.com
ENOM, INC.185.106.122.139 (- Romania)
2016-11-23 18:52Distribution SiteLocky
frivill.hu
91.82.226.140 (- Hungary)
2016-11-23 18:52Distribution SiteLocky
fu-k.jp
61.208.203.245 (- Japan)
2016-11-23 18:52Distribution SiteLocky
4006600592.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-11-23 18:52Distribution SiteLocky
lecitron.org
Key-Systems GmbH94.231.103.127 (- Denmark)
2016-11-23 18:52Distribution SiteLocky
materlux.ru
RU-CENTER-RU188.225.72.34 (- Russian Federation)
2016-11-23 18:52Distribution SiteLocky
meshok.com.ua
194.28.175.168 (- Ukraine)
2016-11-23 18:51Distribution SiteLocky
gpstrackerbali.com
CV. JOGJACAMP219.83.68.90 (- Indonesia)
2016-11-23 18:51Distribution SiteLocky
gigabothosting.com
ENOM, INC.197.189.218.2 (- South Africa)
2016-11-23 18:51Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC (n/a)
2016-11-23 18:51Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:51Distribution SiteLocky
highlandsolar.ca
Promo People Inc.69.90.160.250 (- Canada)
2016-11-23 18:50Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:50Distribution SiteLocky
ivocal.fr
OVH195.14.0.26 (- France)
2016-11-23 18:50Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:50Distribution SiteLocky
vikingradom.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:50Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:50Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:49Distribution SiteLocky
h-miyoshi.ed.jp
219.94.128.187 (- Japan)
2016-11-23 18:49Distribution SiteLocky
islamhizmeti.com
FBS INC. (n/a)
2016-11-23 18:49Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:49Distribution SiteLocky
grafian.pl
Consulting Service Sp. z o.o.85.17.184.32 (- Netherlands)
2016-11-23 18:48Distribution SiteLocky
janzwolinski.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:48Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:48Distribution SiteLocky
naruby.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-23 18:48Distribution SiteLocky
helfter.fr
OVH213.186.33.40 (- France)
2016-11-23 18:48Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:47Distribution SiteLocky
giochasach.com
ENOM, INC.103.9.76.87 (- Vietnam)
2016-11-23 18:46Distribution SiteLocky
chuzhang.net
CHENGDU WEST DIMENSION DIGITAL T[...]162.159.210.45 (- United States) +1 A record(s) 162.159.211.45 (AS13335, - United States)
2016-11-23 18:46Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:45Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"217.17.85.67 (- Lithuania)
2016-11-23 18:45Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
ooomaksim.ru
R01-RU81.177.141.32 (- Russian Federation)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:44Distribution SiteLocky
asrcargo.ru
R01-RU95.213.196.126 (- Russian Federation)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >