Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-09 14:37Distribution SiteLocky
mineralsteel.cl
108.163.209.27 (- United States)
2016-11-09 14:37Distribution SiteLocky
luostone.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-09 14:37Distribution SiteLocky
musicphilicwinds.org
OnlineNIC Inc.103.254.210.99 (- Hong Kong)
2016-11-09 14:37Distribution SiteLocky
www.limpotools.com
REGISTER.IT SPA95.110.158.131 (- Italy)
2016-11-09 14:37Distribution SiteLocky
kembarastation.com
TUCOWS DOMAINS INC. (n/a)
2016-11-09 14:37Distribution SiteLocky
dietafine.cz
REG-WEDOS159.253.25.197 (- Sweden) +2 A record(s) 159.253.28.197 (AS43948, - United Kingdom)
31.192.228.197 (AS197019, - Sweden)
2016-11-09 14:37Distribution SiteLocky
dwalemong.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 14:36Distribution SiteLocky
ketoantamviet.edu.vn
103.48.80.36 (- Vietnam)
2016-11-09 14:36Distribution SiteLocky
electron-trade.ru
R01-RU89.108.118.14 (- Russian Federation)
2016-11-09 14:36Distribution SiteLocky
naka-dent.mobi
GMO Internet, Inc. d/b/a Onamae.[...]120.136.10.80 (- Japan)
2016-11-09 14:36Distribution SiteLocky
moydom.by
Reliable Software, Ltd93.125.99.40 (- Belarus)
2016-11-09 14:36Distribution SiteLocky
lekstom.ru
REGRU-RU (n/a)
2016-11-09 14:36Distribution SiteLocky
islamhizmeti.com
FBS INC. (n/a)
2016-11-09 14:36Distribution SiteLocky
cisehire.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 14:36Distribution SiteLocky
fadyacor.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 14:36Distribution SiteLocky
jrockish.bravepages.com
REGISTER.COM, INC.66.219.202.10 (- United States)
2016-11-09 14:35Distribution SiteLocky
joralan.es
31.47.74.104 (- Spain)
2016-11-09 14:35Distribution SiteLocky
mckm11.cba.pl
Abc Hosting Ltd.95.211.144.68 (- Netherlands)
2016-11-09 14:35Distribution SiteLocky
hunt-magazine.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]119.59.120.52 (- Thailand)
2016-11-09 12:19Payment SiteCerber
ahuqfrqk54v3vnzj.7y1266.top
Eranet International Limited (n/a)
2016-11-09 06:14Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"79.98.26.175 (- Lithuania)
2016-11-09 06:14Distribution SiteLocky
mw077.ru
R01-RU92.53.114.87 (- Russian Federation)
2016-11-09 06:13Distribution SiteLocky
kolumbia.free.bg
Free - St. Petrova ET188.40.80.188 (- Germany)
2016-11-09 06:13Distribution SiteLocky
mtntelekom.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.217 (- Turkey)
2016-11-09 06:13Distribution SiteLocky
naruby.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-09 06:13Distribution SiteLocky
iaam.com.br
191.6.200.97 (- Brazil)
2016-11-09 06:13Distribution SiteLocky
immobilienbegleitung.de
5.9.189.68 (- Germany)
2016-11-09 06:13Distribution SiteLocky
holzhaus.cl
67.23.254.89 (- United States)
2016-11-09 06:13Distribution SiteLocky
kleansys.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]67.222.148.212 (- United States)
2016-11-09 06:13Distribution SiteLocky
adj3.pt
139.59.206.89 (- Germany)
2016-11-09 06:13Distribution SiteLocky
gpsfiles.nl
TransIP BV185.10.48.165 (- Netherlands)
2016-11-09 06:13Distribution SiteLocky
myhtar.ru
R01-RU185.26.121.147 (- Russian Federation)
2016-11-09 06:12Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-09 06:12Distribution SiteLocky
elektrickekefky.sk
193.161.86.230 (- Czech Republic)
2016-11-09 06:12Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC23.236.62.147 (- United States)
2016-11-09 06:12Distribution SiteLocky
shodgrat.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:12Distribution SiteLocky
meshok.com.ua
194.28.175.168 (- Ukraine)
2016-11-09 06:12Distribution SiteLocky
muaban86.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-09 06:12Distribution SiteLocky
sport-grace.by
Open Contact, Ltd86.57.246.177 (- Belarus)
2016-11-09 06:12Distribution SiteLocky
maytinhcaobang.net
ONLINENIC, INC. (n/a)
2016-11-09 06:11Distribution SiteLocky
myxos.be
Registrar.eu92.48.206.18 (- Netherlands)
2016-11-09 06:11Distribution SiteLocky
natalilife.ru
R01-RU81.177.141.52 (- Russian Federation)
2016-11-09 06:11Distribution SiteLocky
shodgrat.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:11Distribution SiteLocky
heatsavingsystems.com
GODADDY.COM, LLC90.156.201.100 (- Russian Federation) +3 A record(s) 90.156.201.111 (AS25532, - Russian Federation)
90.156.201.116 (AS25532, - Russian Federation)
90.156.201.59 (AS25532, - Russian Federation)
2016-11-09 06:11Distribution SiteLocky
wimaj.pl
Consulting Service Sp. z o.o.148.251.10.145 (- Germany)
2016-11-09 06:11Distribution SiteLocky
markscheffel.de
212.227.228.103 (- Germany)
2016-11-09 06:11Distribution SiteLocky
mh500.com
TUCOWS DOMAINS INC.122.147.183.69 (- Taiwan)
2016-11-09 06:11Distribution SiteLocky
hz9m.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-09 06:11Distribution SiteLocky
markanltd.com
DOMAIN.COM, LLC212.175.247.30 (- Turkey)
2016-11-09 06:10Distribution SiteLocky
akram37.com
NAME.COM, INC.88.99.96.171 (- Germany)
2016-11-09 06:10Distribution SiteLocky
mediclo.pl
Michau Enterprises Ltd.46.4.193.159 (- Germany)
2016-11-09 06:10Distribution SiteLocky
faiz-e-mushtaq.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-09 06:10Distribution SiteLocky
168big.com.tw
NET-CHINESE (n/a)
2016-11-09 06:10Distribution SiteLocky
dwalemong.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 06:10Distribution SiteLocky
bg-n.nl
Registrar.eu109.237.218.60 (- Netherlands)
2016-11-09 06:10Distribution SiteLocky
avnbook.com
TUCOWS DOMAINS INC. (n/a)
2016-11-09 06:10Distribution SiteLocky
bipmwebs.com
TUCOWS DOMAINS INC.66.228.41.116 (- United States)
2016-11-09 06:10Distribution SiteLocky
botanasjr.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]72.9.150.177 (- United States)
2016-11-09 06:10Distribution SiteLocky
aquatica.at
84.19.190.8 (- Germany)
2016-11-09 06:10Distribution SiteLocky
asaproducoes.com
ENOM, INC.187.45.187.122 (- Brazil)
2016-11-09 06:09Distribution SiteLocky
basarinn.is
185.174.176.12 (- Iceland)
2016-11-09 06:09Distribution SiteLocky
dwalemong.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 06:09Distribution SiteLocky
birebirpazar.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]77.245.149.4 (- Turkey)
2016-11-09 06:09Distribution SiteLocky
edumarvm.com.ar
138.128.160.50 (- United States)
2016-11-09 06:09Distribution SiteLocky
append.pl
wirtuale.pl S.A.83.143.132.2 (- Poland)
2016-11-09 06:09Distribution SiteLocky
cisehire.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 06:09Distribution SiteLocky
fadyacor.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:09Distribution SiteLocky
edcentre.nl
Mihosnet109.237.214.122 (- Netherlands)
2016-11-09 06:09Distribution SiteLocky
fadyacor.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:09Distribution SiteLocky
bradandmel.com
ONLINENIC, INC.45.33.9.234 (- United States)
2016-11-09 06:09Distribution SiteLocky
aizheni.cn
阿里云计算有限公司([...] (n/a)
2016-11-09 06:09Distribution SiteLocky
dwunion.com
INAMES CO., LTD.183.111.174.25 (- Korea)
2016-11-09 06:09Distribution SiteLocky
campingmclaren.com
1&1 INTERNET SE67.231.17.118 (- Canada)
2016-11-09 06:09Distribution SiteLocky
asianbuffet.ca
Tucows.com Co.69.57.3.3 (- Canada)
2016-11-09 06:09Distribution SiteLocky
cisehire.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
africantickets.de
193.46.215.131 (- Germany)
2016-11-09 06:08Distribution SiteLocky
avenueresto.com
NETIM SARL143.95.233.88 (- United States)
2016-11-09 06:08Distribution SiteLocky
shodgrat.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
friluftsgaarden.dk
94.231.107.241 (- Denmark)
2016-11-09 06:08Distribution SiteLocky
axledha.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
caballerobustamante.com.pe
NIC .PE163.231.4.67 (- United States) +1 A record(s) 164.57.192.25 (AS3145, - United States)
2016-11-09 06:08Distribution SiteLocky
shodgrat.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
diwsj.com
HICHINA ZHICHENG TECHNOLOGY LTD.128.1.174.206 (- United States)
2016-11-09 06:08Distribution SiteLocky
belaket.nl
Webcreators Internet Services92.48.206.137 (- Netherlands)
2016-11-09 06:08Distribution SiteLocky
cosywall.pl
nazwa.pl sp. z o.o. (n/a)
2016-11-09 06:08Distribution SiteLocky
cisehire.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
axledha.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:08Distribution SiteLocky
clickjv.com
GODADDY.COM, LLC67.227.147.225 (- United States)
2016-11-09 06:08Distribution SiteLocky
baseballtivy.com
DYNADOT3 LLC159.25.16.224 (- Germany)
2016-11-09 06:08Distribution SiteLocky
axledha.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-09 06:07Distribution SiteLocky
armantrading.co.ir
31.193.152.35 (- Iran)
2016-11-08 16:55Distribution SiteLocky
panselunel.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 16:54Distribution SiteLocky
breepes.com
WEB COMMERCE COMMUNICATIONS LIMI[...]184.105.192.2 (- United States)
2016-11-08 16:53Distribution SiteLocky
baile518.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-08 16:49Distribution SiteLocky
loterotal.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 16:49Distribution SiteLocky
zapashydro.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 16:47Distribution SiteLocky
eyzimo.ru
R01-RU46.4.67.72 (- Germany)
2016-11-08 16:41Distribution SiteLocky
rokematin.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 16:39Distribution SiteLocky
breepes.com
WEB COMMERCE COMMUNICATIONS LIMI[...]184.105.192.2 (- United States)
2016-11-08 16:38Distribution SiteLocky
owkcon.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >