Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-10 15:45Distribution SiteLocky
axisfluey.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 15:44Distribution SiteLocky
imein.net
BEIJING INNOVATIVE LINKAGE TECHN[...]122.114.90.83 (- China)
2016-11-10 15:44Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:44Distribution SiteLocky
luxurylivingph.com
ENOM, INC. (n/a)
2016-11-10 15:44Distribution SiteLocky
liangriyou.cn
厦门易名科技股份有限[...]120.77.37.237 (- China)
2016-11-10 15:43Distribution SiteLocky
frejasvej.dk
46.30.213.173 (- Denmark)
2016-11-10 15:43Distribution SiteLocky
musicalabanza.org
eNom, Inc.98.124.252.145 (- United States)
2016-11-10 15:43Distribution SiteLocky
dipland.tk
Freedom Registry, Inc. (n/a)
2016-11-10 15:43Distribution SiteLocky
gokkusagidagitim.com.tr
94.73.146.100 (- Turkey)
2016-11-10 15:43Distribution SiteLocky
kreanova.fr
OVH213.186.33.19 (- France)
2016-11-10 15:43Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 15:43Distribution SiteLocky
activedd.net
GODADDY.COM, LLC184.107.144.138 (- Canada)
2016-11-10 15:43Distribution SiteLocky
lordalexleon.com
1 API GMBH (n/a)
2016-11-10 15:43Distribution SiteLocky
gruppoeslabon.com.ph
103.15.28.27 (- Hong Kong)
2016-11-10 15:43Distribution SiteLocky
kuszowka.pl
nazwa.pl sp. z o.o.185.5.98.127 (- Poland)
2016-11-10 15:43Distribution SiteLocky
lowcostveterinarios.com
GODADDY.COM, LLC68.65.122.224 (- United States)
2016-11-10 15:42Distribution SiteLocky
luckyway.kz
ICPS95.56.232.60 (- Kazakhstan)
2016-11-10 15:42Distribution SiteLocky
misaho.com.ar
158.69.98.141 (- Canada)
2016-11-10 15:42Distribution SiteLocky
mirohosting.ru
R01-RU (n/a)
2016-11-10 15:42Distribution SiteLocky
3.ihenan.com
ENAME TECHNOLOGY CO., LTD.122.114.238.186 (- China)
2016-11-10 15:42Distribution SiteLocky
malamalamak9.net
NAMESECURE.COM74.122.121.8 (- United States)
2016-11-10 15:42Distribution SiteLocky
gesund-fit-leben.com
ENOM, INC.68.65.122.97 (- United States)
2016-11-10 15:42Distribution SiteLocky
gerardfetter.com
GODADDY.COM, LLC74.218.154.76 (- United States)
2016-11-10 15:42Distribution SiteLocky
hexinjituan.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.40.239 (- Hong Kong)
2016-11-10 15:42Distribution SiteLocky
lubrinor.pt
94.126.169.40 (- Portugal)
2016-11-10 15:42Distribution SiteLocky
jyxiangqin.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-10 15:41Distribution SiteLocky
landauglobal.co.uk
Promo People, Inc.70.33.246.110 (- Canada)
2016-11-10 15:41Distribution SiteLocky
hundeschulegoerg.de
217.160.0.219 (- Germany)
2016-11-10 15:41Distribution SiteLocky
bj-fzwb.com
SHANGHAI YOVOLE NETWORKS INC. (n/a)
2016-11-10 15:41Distribution SiteLocky
iriscodes.nl
The Registrar Company B.V. (n/a)
2016-11-10 15:41Distribution SiteLocky
motomoto.jp
219.94.159.148 (- Japan)
2016-11-10 15:41Distribution SiteLocky
horecajenp.nl
Mijn InternetOplossing B.V.83.149.75.47 (- Netherlands)
2016-11-10 15:41Distribution SiteLocky
liverdan.be
OVH213.186.33.48 (- France)
2016-11-10 15:41Distribution SiteLocky
oxbridgemedica.net
123-REG LIMITED159.253.212.46 (- United Kingdom)
2016-11-10 15:41Distribution SiteLocky
moymir58.ru
REGTIME-RU217.106.238.230 (- Russian Federation)
2016-11-10 15:41Distribution SiteLocky
house-of-quality.com
WEB COMMERCE COMMUNICATIONS LIMI[...]43.227.231.94 (- Singapore)
2016-11-10 15:41Distribution SiteLocky
jsydjc.com
WEB COMMERCE COMMUNICATIONS LIMI[...]221.122.111.73 (- China)
2016-11-10 15:40Distribution SiteLocky
magicaltouch.co
GODADDY.COM, INC.69.28.199.220 (- Canada)
2016-11-10 15:40Distribution SiteLocky
adultmagstore.co.uk
123-Reg Limited t/a 123-reg185.2.4.92 (- Italy)
2016-11-10 15:40Distribution SiteLocky
mervserver.nl
The Registrar Company B.V. (n/a)
2016-11-10 15:40Distribution SiteLocky
laundryonwheels.ca
eNom Canada Corp.107.154.108.2 (- United States) +1 A record(s) 107.154.110.2 (AS19551, - United States)
2016-11-10 15:40Distribution SiteLocky
nancyabout.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:40Distribution SiteLocky
jawar.eu
nazwa.pl sp. z o.o.91.90.173.31 (- Poland)
2016-11-10 15:40Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:40Distribution SiteLocky
mimatefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.95.17.60 (- United States)
2016-11-10 15:39Distribution SiteLocky
maximumauction.com
GODADDY.COM, LLC107.180.9.230 (- United States)
2016-11-10 15:39Distribution SiteLocky
asrcargo.ru
R01-RU95.213.196.126 (- Russian Federation)
2016-11-10 15:39Distribution SiteLocky
kwlbroadcast.com
CV. JOGJACAMP114.57.247.170 (- Indonesia)
2016-11-10 15:39Distribution SiteLocky
kiancable.co
REALTIME REGISTER B.V. (n/a)
2016-11-10 10:42Payment SiteCerber
vyohacxzoue32vvk.b14kkk.bid
Eranet International Limited (n/a)
2016-11-10 07:01Distribution SiteLocky
lipfest.ru
R01-RU185.12.94.231 (- Russian Federation)
2016-11-10 07:01Distribution SiteLocky
mainlandfishfarm.com
GODADDY.COM, LLC54.251.115.252 (- Singapore)
2016-11-10 07:00Distribution SiteLocky
dalezohak.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 07:00Distribution SiteLocky
isusip.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]80.179.92.187 (- Israel)
2016-11-10 07:00Distribution SiteLocky
frisors.dk
(n/a)
2016-11-10 07:00Distribution SiteLocky
fuchang888.com
XIN NET TECHNOLOGY CORPORATION1.82.191.125 (- China)
2016-11-10 07:00Distribution SiteLocky
gaozhao-edu.com
ENOM, INC. (n/a)
2016-11-10 07:00Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 07:00Distribution SiteLocky
hdtv9.com
REGISTER.IT SPA204.11.56.48 (- Virgin Islands)
2016-11-10 06:58Distribution SiteLocky
mesohair.pl
Consulting Service Sp. z o.o.46.242.148.59 (- Poland)
2016-11-10 06:58Distribution SiteLocky
goedvanstart.nu
The Registrar C.178.19.114.59 (- Netherlands)
2016-11-10 06:58Distribution SiteLocky
dalezohak.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 06:57Distribution SiteLocky
groundfloorelevator.com
GODADDY.COM, LLC65.39.193.50 (- United States)
2016-11-10 06:57Distribution SiteLocky
hartphp.eu
nazwa.pl sp. z o.o.104.18.44.61 (- United States) +1 A record(s) 104.18.45.61 (AS13335, - United States)
2016-11-10 06:57Distribution SiteLocky
tikkatawgi.com
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:57Distribution SiteLocky
mainsl.es
31.47.73.164 (- Spain)
2016-11-10 06:57Distribution SiteLocky
jinanlingshi.com
MAFF INC. (n/a)
2016-11-10 06:57Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 06:57Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:57Distribution SiteLocky
kemerealty.com
GODADDY.COM, LLC198.71.232.3 (- United States)
2016-11-10 06:57Distribution SiteLocky
globissys.co.id
219.83.68.69 (- Indonesia)
2016-11-10 06:56Distribution SiteLocky
gomelnaushnik.com
TUCOWS DOMAINS INC.78.110.50.106 (- Russian Federation)
2016-11-10 06:56Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
mesdan.biz
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-10 06:56Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
gmaster.eu
Realtime Register B.V.109.200.196.179 (- Netherlands)
2016-11-10 06:56Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
goldenroots.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]141.138.168.149 (- Netherlands)
2016-11-10 06:56Distribution SiteLocky
flowersleds.com
INTERNET DOMAIN SERVICE BS CORP78.140.191.6 (- Netherlands)
2016-11-10 04:35Botnet C&CLocky
158.69.223.5
158.69.223.5 (- Canada)
2016-11-09 22:16Payment SiteCerber
vyohacxzoue32vvk.5i0ukv.bid
Eranet International Limited (n/a)
2016-11-09 15:30Distribution SiteLocky
hotelvinayakpalace.in
GoDaddy.com, LLC (R101-AFIN)52.88.80.25 (- United States)
2016-11-09 15:30Distribution SiteLocky
maketiandi.com
CHENGDU WEST DIMENSION DIGITAL T[...]211.149.191.133 (- China)
2016-11-09 15:30Distribution SiteLocky
luigipellegrini.it
OMNIBUS-REG130.211.138.188 (- United States)
2016-11-09 15:29Distribution SiteLocky
komputery-szczytno.pl
Consulting Service Sp. z o.o.5.135.137.36 (- France)
2016-11-09 15:29Distribution SiteLocky
cetidawabi.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:29Distribution SiteLocky
hippaupsup.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:29Distribution SiteLocky
hoardmaire.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:29Distribution SiteLocky
melkar.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.124.5.33 (- Turkey)
2016-11-09 15:28Distribution SiteLocky
cetidawabi.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:28Distribution SiteLocky
jimmink.nl
Webcreators Internet Services62.221.208.155 (- Netherlands)
2016-11-09 15:28Distribution SiteLocky
dogalamman.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-09 15:28Distribution SiteLocky
luible.net
COREHUB, S.R.L.85.114.145.244 (- Germany)
2016-11-09 15:27Distribution SiteLocky
ausulifer.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-09 15:27Distribution SiteLocky
idareu.co
TUCOWS DOMAINS INC.178.32.154.18 (- France)
2016-11-09 15:27Distribution SiteLocky
www.0898tz.com
XIN NET TECHNOLOGY CORPORATION39.108.119.173 (- China)
2016-11-09 15:27Distribution SiteLocky
dogalamman.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-09 15:27Distribution SiteLocky
magicspain.ru
REGRU-RU81.177.140.233 (- Russian Federation)
2016-11-09 15:26Distribution SiteLocky
mishenka.su
REGRU-REG-FID212.109.218.126 (- Russian Federation)
2016-11-09 15:26Distribution SiteLocky
katallog.pl
OVH SAS188.116.20.89 (- Poland)

# of rows displayed: 100
# of entries in database: 12'877

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >