Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-23 18:56Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:56Distribution SiteLocky
gold-or.ca
Webnames.ca Inc.104.37.35.81 (- United States)
2016-11-23 18:56Distribution SiteLocky
orthoskin.com
CRONON AG81.169.145.80 (- Germany)
2016-11-23 18:55Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:54Distribution SiteLocky
greentic.univcasa.ma
MEDI TELECOM196.200.165.11 (- Morocco)
2016-11-23 18:54Distribution SiteLocky
musicrecruiting.com
GODADDY.COM, LLC192.230.81.195 (- United States) +1 A record(s) 199.83.134.195 (AS26496, - United States)
2016-11-23 18:54Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:54Distribution SiteLocky
gpsfiles.nl
TransIP BV185.10.48.165 (- Netherlands)
2016-11-23 18:53Distribution SiteLocky
heatsavingsystems.com
GODADDY.COM, LLC90.156.201.100 (- Russian Federation) +3 A record(s) 90.156.201.111 (AS25532, - Russian Federation)
90.156.201.116 (AS25532, - Russian Federation)
90.156.201.59 (AS25532, - Russian Federation)
2016-11-23 18:53Distribution SiteLocky
panificadoraavenida.com
MARCARIA.COM, INTERNATIONAL, INC[...]107.6.144.42 (- United States)
2016-11-23 18:53Distribution SiteLocky
rentalpark.com.ar
200.80.52.117 (- Argentina)
2016-11-23 18:53Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:53Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:53Distribution SiteLocky
iwebsdns.com
DNC HOLDINGS, INC. (n/a)
2016-11-23 18:52Distribution SiteLocky
markscheffel.de
212.227.228.103 (- Germany)
2016-11-23 18:52Distribution SiteLocky
peruincoming.com
ENOM, INC.185.106.122.139 (- Romania)
2016-11-23 18:52Distribution SiteLocky
frivill.hu
91.82.226.140 (- Hungary)
2016-11-23 18:52Distribution SiteLocky
fu-k.jp
61.208.203.245 (- Japan)
2016-11-23 18:52Distribution SiteLocky
4006600592.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-11-23 18:52Distribution SiteLocky
lecitron.org
Key-Systems GmbH94.231.103.127 (- Denmark)
2016-11-23 18:52Distribution SiteLocky
materlux.ru
RU-CENTER-RU188.225.72.34 (- Russian Federation)
2016-11-23 18:52Distribution SiteLocky
meshok.com.ua
194.28.175.168 (- Ukraine)
2016-11-23 18:51Distribution SiteLocky
gpstrackerbali.com
CV. JOGJACAMP219.83.68.90 (- Indonesia)
2016-11-23 18:51Distribution SiteLocky
gigabothosting.com
ENOM, INC.197.189.218.2 (- South Africa)
2016-11-23 18:51Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC23.236.62.147 (- United States)
2016-11-23 18:51Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:51Distribution SiteLocky
highlandsolar.ca
Promo People Inc.69.90.160.250 (- Canada)
2016-11-23 18:50Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:50Distribution SiteLocky
ivocal.fr
OVH195.14.0.26 (- France)
2016-11-23 18:50Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:50Distribution SiteLocky
vikingradom.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:50Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:50Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:49Distribution SiteLocky
h-miyoshi.ed.jp
219.94.128.187 (- Japan)
2016-11-23 18:49Distribution SiteLocky
islamhizmeti.com
FBS INC. (n/a)
2016-11-23 18:49Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:49Distribution SiteLocky
grafian.pl
Consulting Service Sp. z o.o.85.17.184.32 (- Netherlands)
2016-11-23 18:48Distribution SiteLocky
janzwolinski.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:48Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:48Distribution SiteLocky
naruby.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-23 18:48Distribution SiteLocky
helfter.fr
OVH213.186.33.40 (- France)
2016-11-23 18:48Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:47Distribution SiteLocky
giochasach.com
ENOM, INC.103.9.76.87 (- Vietnam)
2016-11-23 18:46Distribution SiteLocky
chuzhang.net
CHENGDU WEST DIMENSION DIGITAL T[...]162.159.210.45 (- United States) +1 A record(s) 162.159.211.45 (AS13335, - United States)
2016-11-23 18:46Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:45Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"217.17.85.67 (- Lithuania)
2016-11-23 18:45Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
ooomaksim.ru
R01-RU81.177.141.32 (- Russian Federation)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:44Distribution SiteLocky
asrcargo.ru
R01-RU95.213.196.126 (- Russian Federation)
2016-11-23 15:55Distribution SiteLocky
p2pbikini.com
MAT BAO TRADING & SERVICE COMPAN[...]204.11.56.48 (- Virgin Islands)
2016-11-23 15:54Distribution SiteLocky
normalizemusic.com
REGISTER.COM, INC.66.84.59.98 (- United States)
2016-11-23 15:54Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-23 15:54Distribution SiteLocky
power4speed.com
GODADDY.COM, LLC216.131.90.178 (- United States)
2016-11-23 15:53Distribution SiteLocky
premagro.ro
ICI - ROTLD176.223.208.18 (- Europe)
2016-11-23 15:53Distribution SiteLocky
nabila.co.id
118.98.75.70 (- Indonesia)
2016-11-23 15:52Distribution SiteLocky
nnptrading.com
DOMAIN.COM, LLC203.151.233.116 (- Thailand)
2016-11-23 15:52Distribution SiteLocky
raivel.pt
188.93.230.41 (- Portugal)
2016-11-23 15:51Distribution SiteLocky
rgbserver.be
AXC108.174.149.222 (- United States)
2016-11-23 15:50Distribution SiteLocky
panoramicprocurement.net
GODADDY.COM, LLC23.229.173.235 (- United States)
2016-11-23 15:50Distribution SiteLocky
pedullaelectric.com
TUCOWS DOMAINS INC.69.90.160.65 (- Canada)
2016-11-23 15:50Distribution SiteLocky
rafaelleon.es
51.255.70.85 (- France)
2016-11-23 15:49Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-23 15:49Distribution SiteLocky
noosnegah.com
REALTIME REGISTER BV148.251.131.61 (- Germany)
2016-11-23 15:48Distribution SiteLocky
pakcek.com
ENOM, INC.198.54.115.49 (- United States)
2016-11-23 15:47Distribution SiteLocky
nkfyfs.cn
郑州世纪创联电子科技[...]122.114.147.82 (- China)
2016-11-23 15:47Distribution SiteLocky
padcha.com
GODADDY.COM, LLC184.168.221.36 (- United States)
2016-11-23 15:47Distribution SiteLocky
pietroconfalonieri.com
TUCOWS DOMAINS INC.93.186.251.182 (- Italy)
2016-11-23 15:46Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-11-23 15:45Distribution SiteLocky
p-sysnet.de
213.165.89.183 (- Germany)
2016-11-23 15:45Distribution SiteLocky
platinumrainbow.com
ENOM, INC.98.124.251.167 (- United States)
2016-11-23 10:49Distribution SiteLocky
jinxlaze.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 10:49Distribution SiteLocky
prayerarchive.com
WILD WEST DOMAINS, LLC50.115.230.116 (- United States)
2016-11-23 10:49Distribution SiteLocky
nicehdwall.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-23 10:48Distribution SiteLocky
pineysprat.com
KEY-SYSTEMS GMBH (n/a)
2016-11-23 10:48Distribution SiteLocky
pratecnet.org
eNom, Inc.66.7.218.232 (- United States)
2016-11-23 10:48Distribution SiteLocky
vedicmotet.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:48Distribution SiteLocky
obtenloya.com
GODADDY.COM, LLC23.254.240.58 (- United States)
2016-11-23 10:48Distribution SiteLocky
pesci.ro
ICI - ROTLD89.18.180.28 (- Netherlands)
2016-11-23 10:48Distribution SiteLocky
ptworkdomain.com
DOMAINPEOPLE, INC. (n/a)
2016-11-23 10:47Distribution SiteLocky
qdweierya.com
HICHINA ZHICHENG TECHNOLOGY LTD.103.82.53.118 (- China)
2016-11-23 10:47Distribution SiteLocky
pensionwoehler.de
91.233.84.194 (- Germany)
2016-11-23 10:47Distribution SiteLocky
gurlfanam.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:47Distribution SiteLocky
nightpeople.co.il
(n/a)
2016-11-23 10:47Distribution SiteLocky
gurlfanam.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:47Distribution SiteLocky
vedicmotet.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:47Distribution SiteLocky
pearlgonzalez.com
TUCOWS DOMAINS INC.166.63.11.180 (- United States)
2016-11-23 10:47Distribution SiteLocky
nhatnang.vn
125.212.196.105 (- Vietnam)
2016-11-23 10:47Distribution SiteLocky
broncvita.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 10:46Distribution SiteLocky
natural-anxiety-remedies.com
1&1 INTERNET SE174.127.104.112 (- United States)
2016-11-23 10:46Distribution SiteLocky
jinxlaze.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 10:46Distribution SiteLocky
plus39italiandesign.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]45.33.9.234 (- United States)
2016-11-23 10:46Distribution SiteLocky
reklomastik.com
FBS INC.185.149.100.114 (- Turkey)
2016-11-23 10:46Distribution SiteLocky
retrokit.ca
Promo People Inc.69.90.161.130 (- Canada)
2016-11-23 10:46Distribution SiteLocky
vedicmotet.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:46Distribution SiteLocky
rabavolgy.hu
185.5.229.30 (- Hungary)
2016-11-23 10:46Distribution SiteLocky
broncvita.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 10:45Distribution SiteLocky
plasterers-spb.ru
R01-RU148.251.187.239 (- Germany)

# of rows displayed: 100
# of entries in database: 12'876

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >