Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-21 11:48Distribution SiteLocky
minee.cm
Registrar ANTIC195.24.207.196 (- Cameroon)
2016-11-21 11:48Distribution SiteLocky
bilbords.com
FBS INC.52.204.129.22 (- United States) +1 A record(s) 54.85.127.70 (AS14618, - United States)
2016-11-21 11:48Distribution SiteLocky
reiffen.info
PSI-USA, Inc. dba Domain Robot185.194.237.79 (- Germany)
2016-11-21 11:47Distribution SiteLocky
fodgeslade.com
KEY-SYSTEMS GMBH (n/a)
2016-11-21 11:47Distribution SiteLocky
knutewhar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-21 11:47Distribution SiteLocky
cheap-sports-jerseys.com
GODADDY.COM, LLC68.65.122.221 (- United States)
2016-11-21 11:47Distribution SiteLocky
kodivac.com
INAMES CO., LTD.211.115.111.229 (- Korea)
2016-11-21 11:46Distribution SiteLocky
mangetsudo.net
TUCOWS DOMAINS INC.219.118.71.133 (- Japan)
2016-11-21 11:46Distribution SiteLocky
knutewhar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-21 11:46Distribution SiteLocky
sambaplack.com
KEY-SYSTEMS GMBH (n/a)
2016-11-21 11:46Distribution SiteLocky
moffia.nl
Registrar.eu (n/a)
2016-11-21 11:46Distribution SiteLocky
nitay.com
MISK.COM, INC.188.116.19.36 (- Poland)
2016-11-21 11:46Distribution SiteLocky
inthiraspa.com
GODADDY.COM, LLC122.155.12.240 (- Thailand)
2016-11-21 11:46Distribution SiteLocky
ulmicsulfa.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-21 11:45Distribution SiteLocky
psouutarnow.org
Key-Systems GmbH (n/a)
2016-11-21 11:45Distribution SiteLocky
naschlouey.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-21 11:45Distribution SiteLocky
sambaplack.com
KEY-SYSTEMS GMBH (n/a)
2016-11-21 11:45Distribution SiteLocky
ulmicsulfa.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-21 11:45Distribution SiteLocky
ehaaranen.com
GODADDY.COM, LLC143.95.79.207 (- United States)
2016-11-21 10:41Distribution SiteLocky
dverizamki-t34.ru
RU-CENTER-RU91.217.9.212 (- Russian Federation)
2016-11-21 10:38Distribution SiteLocky
khatibul-umamwiranu.com
CV. RUMAHWEB INDONESIA103.247.9.149 (- Indonesia)
2016-11-21 10:38Distribution SiteLocky
jjbook.net
CHENGDU WEST DIMENSION DIGITAL T[...]123.1.174.236 (- Hong Kong)
2016-11-21 10:38Distribution SiteLocky
kppngarut.org
CV. Jogjacamp (n/a)
2016-11-21 10:38Distribution SiteLocky
iovel.ro
Telekom Romania Communications S[...]86.35.15.180 (- Romania)
2016-11-21 10:38Distribution SiteLocky
jaures.be
Ligne Web Services ( LWS )46.105.57.169 (- France)
2016-11-21 10:38Distribution SiteLocky
kahane.fr
OVH192.0.78.24 (- United States) +1 A record(s) 192.0.78.25 (AS2635, - United States)
2016-11-21 10:38Distribution SiteLocky
ayurvedic.by
Reliable Software, Ltd86.57.246.177 (- Belarus)
2016-11-21 10:38Distribution SiteLocky
icdsarch.com
TUCOWS DOMAINS INC. (n/a)
2016-11-21 10:38Distribution SiteLocky
intertaller.eu
GANDI91.195.240.70 (- Germany)
2016-11-21 10:38Distribution SiteLocky
jellybaby.org.uk
Mr Max Ramyar t/a Abel Internet78.33.15.234 (- United Kingdom)
2016-11-21 10:38Distribution SiteLocky
jltl.net
CHENGDU WEST DIMENSION DIGITAL T[...]103.254.151.60 (- Hong Kong)
2016-11-21 10:38Distribution SiteLocky
joshcomeauxhair.com
GODADDY.COM, LLC107.180.13.247 (- United States)
2016-11-21 10:37Distribution SiteLocky
markosia.com
123-REG LIMITED149.255.58.112 (- United Kingdom)
2016-11-21 10:37Distribution SiteLocky
kemerhaber.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-21 10:37Distribution SiteLocky
hotelsheikhpalace.com
GODADDY.COM, LLC111.118.215.51 (- India)
2016-11-21 10:37Distribution SiteLocky
kubstroy.by
Active Technologies LLC (n/a)
2016-11-21 10:37Distribution SiteLocky
kaldar.pl
Consulting Service Sp. z o.o.188.116.20.49 (- Poland)
2016-11-21 10:37Distribution SiteLocky
kirillpryadukhin.ru
REGRU-RU185.105.224.243 (- Russian Federation)
2016-11-21 10:37Distribution SiteLocky
mclodesigns.com
GODADDY.COM, LLC148.72.1.119 (- United States)
2016-11-21 10:37Distribution SiteLocky
job0916.cn
上海美橙科技信息发展[...] (n/a)
2016-11-21 10:37Distribution SiteLocky
decorvise.com
1&1 INTERNET SE217.160.0.75 (- Germany)
2016-11-21 10:37Distribution SiteLocky
innovationcircle.com
KEY-SYSTEMS GMBH5.200.16.220 (- Netherlands)
2016-11-21 10:37Distribution SiteLocky
invisplast.ru
R01-RU91.218.231.50 (- Russian Federation)
2016-11-21 10:37Distribution SiteLocky
kovac-trade.com
TLDS, LLC DBA SRSPLUS (n/a)
2016-11-21 10:36Distribution SiteLocky
jmltda.cl
(n/a)
2016-11-21 10:36Distribution SiteLocky
kuhnidejan.ru
R01-RU92.53.96.114 (- Russian Federation)
2016-11-21 10:36Distribution SiteLocky
kuangfenxian.com
HICHINA ZHICHENG TECHNOLOGY LTD.120.25.251.140 (- China)
2016-11-21 10:36Distribution SiteLocky
livingnetwork.co.za
148.251.21.20 (- Germany)
2016-11-21 10:36Distribution SiteLocky
mggsoft.com
ENOM, INC.98.124.251.67 (- United States)
2016-11-21 10:36Distribution SiteLocky
sheerfoldy.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-21 10:36Distribution SiteLocky
madde.org
Tucows Inc.5.2.83.60 (- Turkey)
2016-11-21 10:36Distribution SiteLocky
imexltd.eu
Heart Internet Ltd176.32.230.9 (- United Kingdom)
2016-11-21 10:36Distribution SiteLocky
majesticimmo.com
GENIOUS COMMUNICATIONS SARL/AU41.77.112.55 (- Morocco)
2016-11-21 10:36Distribution SiteLocky
impobg.eu
PDR Ltd. (n/a)
2016-11-20 23:02Payment SiteCerber
ffoqr3ug7m726zou.w22p3v.top
Eranet International Limited (n/a)
2016-11-20 22:59Payment SiteCerber
xrhwryizf5mui7a5.h44l3d.bid
Eranet International Limited (n/a)
2016-11-20 16:16Botnet C&CLocky
185.75.46.73
185.75.46.73 (- Russian Federation)
2016-11-20 13:45Payment SiteCerber
ffoqr3ug7m726zou.e1e7w2.top
Eranet International Limited (n/a)
2016-11-20 11:12Payment SiteCerber
ffoqr3ug7m726zou.5m2n7x.top
Eranet International Limited (n/a)
2016-11-20 10:47Payment SiteCerber
vyohacxzoue32vvk.u8e2dz.top
Eranet International Limited (n/a)
2016-11-20 08:42Payment SiteCerber
lfdachijzuwx4bc4.ci221p.top
Eranet International Limited (n/a)
2016-11-20 06:48Payment SiteCerber
vyohacxzoue32vvk.pr52ni.top
Eranet International Limited (n/a)
2016-11-20 04:40Payment SiteCerber
ffoqr3ug7m726zou.1feasu.top
Eranet International Limited (n/a)
2016-11-19 21:20Payment SiteCerber
xrhwryizf5mui7a5.r8c85p.top
Eranet International Limited (n/a)
2016-11-19 19:30Payment SiteCerber
vyohacxzoue32vvk.5s96fr.top
Eranet International Limited (n/a)
2016-11-19 09:06Botnet C&CLocky
89.108.73.124
89.108.73.124 (- Russian Federation)
2016-11-19 08:30Payment SiteCerber
vyohacxzoue32vvk.r3b2sh.top
Eranet International Limited (n/a)
2016-11-19 08:08Payment SiteCerber
ffoqr3ug7m726zou.lruwth.top
Eranet International Limited (n/a)
2016-11-19 02:21Botnet C&CLocky
mmhmtea.pw
Namecheap208.100.26.234 (- United States)
2016-11-18 22:50Payment SiteCerber
ffoqr3ug7m726zou.2msuuj.top
Eranet International Limited (n/a)
2016-11-18 19:44Payment SiteCerber
ffoqr3ug7m726zou.gwz8gh.top
Eranet International Limited (n/a)
2016-11-18 18:59Payment SiteCerber
vyohacxzoue32vvk.ezb568.top
Eranet International Limited (n/a)
2016-11-18 18:40Payment SiteCerber
ffoqr3ug7m726zou.zkxb17.top
Eranet International Limited (n/a)
2016-11-18 17:58Payment SiteCerber
vyohacxzoue32vvk.ncw0rp.top
Eranet International Limited (n/a)
2016-11-18 10:53Payment SiteTorrentLocker
ojmekzw4mujvqeju.fineboy.at
(n/a)
2016-11-18 09:55Payment SiteCerber
vyohacxzoue32vvk.vjso7r.top
Eranet International Limited (n/a)
2016-11-18 08:07Payment SiteCerber
vyohacxzoue32vvk.jnv1df.top
Eranet International Limited (n/a)
2016-11-17 15:40Payment SiteCerber
lfdachijzuwx4bc4.fe6cf2.top
Eranet International Limited (n/a)
2016-11-16 18:35Payment SiteCerber
vyohacxzoue32vvk.3t3hyf.top
Eranet International Limited (n/a)
2016-11-16 16:05Payment SiteCerber
ffoqr3ug7m726zou.735giv.top
Eranet International Limited (n/a)
2016-11-16 06:33Payment SiteCerber
vyohacxzoue32vvk.o5b17o.top
Eranet International Limited (n/a)
2016-11-15 23:09Payment SiteCerber
ffoqr3ug7m726zou.xe1ws1.top
Eranet International Limited (n/a)
2016-11-15 11:53Botnet C&CLocky
185.82.217.29
185.82.217.29 (- Bulgaria)
2016-11-15 10:07Payment SiteTorrentLocker
ojmekzw4mujvqeju.minitili.at
(n/a)
2016-11-15 07:39Payment SiteCerber
ffoqr3ug7m726zou.ndnmuk.top
Eranet International Limited (n/a)
2016-11-15 02:48Botnet C&CLocky
107.181.174.34
107.181.174.34 (- United States)
2016-11-14 19:15Botnet C&CLocky
93.170.123.119
93.170.123.119 (- Czech Republic)
2016-11-14 11:15Payment SiteCerber
ffoqr3ug7m726zou.rssh3l.bid
Eranet International Limited (n/a)
2016-11-14 09:27Payment SiteCerber
ffoqr3ug7m726zou.2rl0pv.top
Eranet International Limited (n/a)
2016-11-14 06:45Payment SiteCerber
lfdachijzuwx4bc4.vrgdrs.top
Eranet International Limited (n/a)
2016-11-14 04:11Payment SiteCerber
ffoqr3ug7m726zou.iocvou.top
Eranet International Limited (n/a)
2016-11-14 01:16Payment SiteCerber
ahuqfrqk54v3vnzj.8kiec2.top
Eranet International Limited (n/a)
2016-11-14 00:58Payment SiteCerber
ffoqr3ug7m726zou.bwei9h.top
Eranet International Limited (n/a)
2016-11-13 20:45Payment SiteCerber
vyohacxzoue32vvk.k9p80d.top
Eranet International Limited (n/a)
2016-11-13 17:28Payment SiteCerber
vyohacxzoue32vvk.ewfp5y.bid
Eranet International Limited (n/a)
2016-11-13 11:26Payment SiteCerber
ffoqr3ug7m726zou.vjso7r.top
Eranet International Limited (n/a)
2016-11-13 09:16Distribution SiteLocky
madly.me
NameCheap, Inc.143.95.78.242 (- United States)
2016-11-13 09:15Distribution SiteLocky
metallbau-lamprecht.ch
185.101.158.113 (- Switzerland)
2016-11-13 09:15Distribution SiteLocky
angeredo.com
PAKNIC (PRIVATE) LIMITED204.11.56.48 (- Virgin Islands)
2016-11-13 09:15Distribution SiteLocky
lexcellence.ru
RU-CENTER-RU5.9.89.100 (- Germany)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >