Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-22 12:41Distribution SiteLocky
hancebile.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:40Distribution SiteLocky
interdean.hu
95.131.66.24 (- United Kingdom)
2016-11-22 12:40Distribution SiteLocky
lifanpower.pl
nazwa.pl sp. z o.o.81.21.192.149 (- Poland)
2016-11-22 12:40Distribution SiteLocky
lp511.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-22 12:40Distribution SiteLocky
ulmustway.com
PAKNIC (PRIVATE) LIMITEDn/a
2016-11-22 12:39Distribution SiteLocky
microsupport.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.37.35.84 (- United States)
2016-11-22 12:39Distribution SiteLocky
reoilmaya.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-22 12:39Distribution SiteLocky
mybankofgold.com
INSTRA CORPORATION PTY, LTD.213.136.88.141 (- Germany)
2016-11-22 12:39Distribution SiteLocky
rsahosting.com
ENOM, INC.143.95.246.177 (- United States)
2016-11-22 12:38Distribution SiteLocky
hancebile.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:38Distribution SiteLocky
convertus.com
GODADDY.COM, LLC216.129.207.43 (- Canada)
2016-11-22 12:38Distribution SiteLocky
gtodo.com.ar
200.110.156.67 (- Argentina)
2016-11-22 12:38Distribution SiteLocky
thegioitructuyen.org
P.A. Viet Nam Company Limited103.7.41.15 (- Vietnam)
2016-11-22 12:38Distribution SiteLocky
mcmustard.com
REGISTER.COM, INC.192.124.249.107 (- United States)
2016-11-22 12:38Distribution SiteLocky
maxifitness.ru
REGRU-RU194.58.112.165 (- Russian Federation)
2016-11-22 12:38Distribution SiteLocky
facerecognition.com.ba
195.222.33.173 (- Bosnia and Herzegovina)
2016-11-22 12:37Distribution SiteLocky
jazz.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-22 12:37Distribution SiteLocky
dtinsani.com
ONLINENIC, INC.175.103.55.72 (- Indonesia)
2016-11-22 12:37Distribution SiteLocky
sadhekoala.com
KEY-SYSTEMS GMBH (n/a)
2016-11-22 12:36Distribution SiteLocky
sbdma.com
ENOM, INC.187.45.240.4 (- Brazil)
2016-11-22 12:36Distribution SiteLocky
gxaiq.com
CHENGDU WEST DIMENSION DIGITAL T[...]219.234.6.204 (- China)
2016-11-22 12:36Distribution SiteLocky
natalija.ru
R01-RU217.112.42.86 (- United Kingdom)
2016-11-22 12:36Distribution SiteLocky
mooymedia.nl
Fast DRS188.227.200.134 (- Netherlands)
2016-11-22 12:35Distribution SiteLocky
kabele.ru
RU-CENTER-RU195.28.183.183 (- Ukraine)
2016-11-22 12:35Distribution SiteLocky
i12.ir
148.251.133.251 (- Germany)
2016-11-22 12:35Distribution SiteLocky
melzer-casting.de
(n/a)
2016-11-22 12:35Distribution SiteLocky
illinoisnavhda.org
BRANDON GRAY INTERNET SERVICES I[...]209.35.112.216 (- United States)
2016-11-22 12:35Distribution SiteLocky
bursacicekmagazasi.com
REG2C.COM, INC.188.124.24.242 (- Turkey)
2016-11-22 12:35Distribution SiteLocky
kstm.or.th
T.H.NIC Co., Ltd.103.7.56.217 (- Thailand)
2016-11-22 12:35Distribution SiteLocky
poltec.com.au
Web Address Registration27.54.86.236 (- Australia)
2016-11-22 12:34Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-11-22 12:34Distribution SiteLocky
pattumalamatha.com
GODADDY.COM, LLC166.62.30.149 (- United States)
2016-11-22 12:34Distribution SiteLocky
touroflimassol.com
1&1 INTERNET SE216.250.120.159 (- United States)
2016-11-22 12:34Distribution SiteLocky
megalingeriemall.com
GODADDY.COM, LLC (n/a)
2016-11-22 12:34Distribution SiteLocky
wbakerpsych.com
ENOM, INC. (n/a)
2016-11-22 12:34Distribution SiteLocky
sdwsgs.com
HICHINA ZHICHENG TECHNOLOGY LTD.192.151.226.12 (- United States)
2016-11-22 12:34Distribution SiteLocky
adoptshawm.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:33Distribution SiteLocky
lumitech.ro
ICI - ROTLD176.223.127.251 (- Romania)
2016-11-22 12:33Distribution SiteLocky
snehil.com
GODADDY.COM, LLC182.18.143.140 (- India)
2016-11-22 12:33Distribution SiteLocky
woodmode-eg.com
DOMAIN.COM, LLC (n/a)
2016-11-22 12:33Distribution SiteLocky
korbastudio.com
NETART SP Z O.O188.116.9.201 (- Poland)
2016-11-22 12:33Distribution SiteLocky
campossa.com
EURODNS S.A192.232.251.68 (- United States)
2016-11-22 12:32Distribution SiteLocky
gto-cro.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]104.27.168.253 (- United States) +1 A record(s) 104.27.169.253 (AS13335, - United States)
2016-11-22 12:32Distribution SiteLocky
remixsarkilar.com
NAME.COM, INC.185.126.216.142 (- Turkey)
2016-11-22 12:32Distribution SiteLocky
jkshea.com
NETEARTH ONE INC. D/B/A NETEARTH162.253.225.27 (- United States)
2016-11-22 12:32Distribution SiteLocky
phaseiv.org
Network Solutions, LLC107.154.157.57 (- United States) +1 A record(s) 107.154.164.57 (AS19551, - United States)
2016-11-22 12:32Distribution SiteLocky
maroeg.com
WILD WEST DOMAINS, LLC (n/a)
2016-11-22 12:31Distribution SiteLocky
irandivinggroup.com
TUCOWS DOMAINS INC.144.76.226.125 (- Germany)
2016-11-22 12:30Distribution SiteLocky
csplane.com
GODADDY.COM, LLC72.55.186.12 (- Canada)
2016-11-22 12:30Distribution SiteLocky
touroflimassol.com
1&1 INTERNET SE216.250.120.159 (- United States)
2016-11-22 12:30Distribution SiteLocky
vedexpert.com
REGIONAL NETWORK INFORMATION CEN[...]78.46.52.118 (- Germany)
2016-11-22 12:30Distribution SiteLocky
whatsapphd.com
GODADDY.COM, LLC54.175.122.194 (- United States)
2016-11-22 12:30Distribution SiteLocky
oualili.org
FastDomain Inc. (n/a)
2016-11-22 12:29Distribution SiteLocky
rndled.com
HICHINA ZHICHENG TECHNOLOGY LTD.173.213.74.154 (- United States)
2016-11-22 12:29Distribution SiteLocky
ulmustway.com
PAKNIC (PRIVATE) LIMITEDn/a
2016-11-22 12:29Distribution SiteLocky
valpit.ru
RU-CENTER-RU109.70.26.37 (- Russian Federation) +1 A record(s) 194.85.61.76 (AS203051, - Russian Federation)
2016-11-22 08:31Distribution SiteLocky
langzhong8.com
CHENGDU WEST DIMENSION DIGITAL T[...]113.10.202.129 (- Hong Kong)
2016-11-22 08:31Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:30Distribution SiteLocky
intensivo.nl
AXC185.182.56.89 (- Netherlands)
2016-11-22 08:30Distribution SiteLocky
hubis.ir
88.99.160.208 (- Germany)
2016-11-22 08:30Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:30Distribution SiteLocky
hosimin.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.89.58.141 (- Hong Kong)
2016-11-22 08:30Distribution SiteLocky
tupsorva.net
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:30Distribution SiteLocky
mice.co.th
T.H.NIC Co., Ltd.122.155.201.188 (- Thailand)
2016-11-22 08:30Distribution SiteLocky
lijschool.com
GABIA, INC.183.111.174.19 (- Korea)
2016-11-22 08:30Distribution SiteLocky
manhtienphat.com
MAT BAO TRADING & SERVICE COMPAN[...]45.33.9.234 (- United States)
2016-11-22 08:30Distribution SiteLocky
kzprojekt.pl
nazwa.pl sp. z o.o.193.239.206.248 (- Poland)
2016-11-22 08:30Distribution SiteLocky
k-koubunsha.jp
202.164.227.193 (- Japan)
2016-11-22 08:30Distribution SiteLocky
lomtour.com
NAME.COM, INC.203.146.26.85 (- Thailand)
2016-11-22 08:29Distribution SiteLocky
icnvcopa.com
ENOM, INC.69.64.147.47 (- United States)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ayso722.org
FastDomain Inc.74.220.199.8 (- United States)
2016-11-22 08:29Distribution SiteLocky
hfhhk.com
GODADDY.COM, LLC118.193.132.185 (- China)
2016-11-22 08:29Distribution SiteLocky
irnetshop.com
REALTIME REGISTER BV104.31.64.212 (- United States) +1 A record(s) 104.31.65.212 (AS13335, - United States)
2016-11-22 08:29Distribution SiteLocky
internationalservice.ro
ICI - ROTLD188.215.48.176 (- Romania)
2016-11-22 08:29Distribution SiteLocky
ipiasarnano.it
WIDE-REG217.73.227.20 (- Italy)
2016-11-22 08:29Distribution SiteLocky
emdrozd.net
KEY-SYSTEMS GMBH91.227.122.66 (- Poland)
2016-11-22 08:29Distribution SiteLocky
gerardfetter.com
GODADDY.COM, LLC74.218.154.76 (- United States)
2016-11-22 08:29Distribution SiteLocky
nnptrading.com
DOMAIN.COM, LLC203.151.233.116 (- Thailand)
2016-11-22 08:28Distribution SiteLocky
vyingouch.com
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:28Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:28Distribution SiteLocky
laszloiparcikk.hu
195.228.86.32 (- Hungary)
2016-11-22 08:28Distribution SiteLocky
mildreddeskinsjewelry.com
GODADDY.COM, LLC192.186.223.200 (- United States)
2016-11-22 08:28Distribution SiteLocky
mygfiltre.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]31.169.77.100 (- Turkey)
2016-11-22 08:28Distribution SiteLocky
espansioneimmobiliare.com
WILD WEST DOMAINS, LLC192.124.249.107 (- United States)
2016-11-22 08:28Distribution SiteLocky
tupsorva.net
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:28Distribution SiteLocky
mileswebhosting.nl
TransIP BV93.186.180.61 (- Netherlands)
2016-11-22 08:28Distribution SiteLocky
naturalcode-thailand.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.44.105 (- Thailand)
2016-11-22 08:28Distribution SiteLocky
lvyeqingtian.com
HICHINA ZHICHENG TECHNOLOGY LTD.203.158.19.103 (- China)
2016-11-22 08:28Distribution SiteLocky
guymorgandaily.com
GODADDY.COM, LLC143.95.247.30 (- United States)
2016-11-22 08:27Distribution SiteLocky
fazendacristal.com
ENOM, INC.186.202.153.198 (- Brazil)
2016-11-22 08:27Distribution SiteLocky
vyingouch.com
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:27Distribution SiteLocky
identita.dk
185.21.41.39 (- Denmark)
2016-11-22 08:27Distribution SiteLocky
grandfm.com
GODADDY.COM, LLC61.12.36.98 (- India)
2016-11-22 08:27Distribution SiteLocky
vyingouch.com
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:27Distribution SiteLocky
tupsorva.net
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:27Distribution SiteLocky
tafiathiol.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-22 08:27Distribution SiteLocky
iptravel.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.249.84.96 (- Malaysia)

# of rows displayed: 100
# of entries in database: 12'877

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >