Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-15 06:49Distribution SiteLocky
forbrent.com
TIERRANET INC. D/B/A DOMAINDISCO[...]216.104.177.207 (- United States)
2016-12-15 06:49Distribution SiteLocky
fyd123.cn
阿里云计算有限公司([...]113.6.251.83 (- China)
2016-12-15 06:48Distribution SiteLocky
2kindustri.se
Loopia AB (n/a)
2016-12-15 06:48Distribution SiteLocky
neu.hansmuennich.de.baugebiet-stadlhof.de
212.172.50.111 (- Germany)
2016-12-15 06:48Distribution SiteLocky
ekbundit.com
GODADDY.COM, LLC67.227.188.226 (- United States)
2016-12-15 06:47Distribution SiteLocky
www.espansioneimmobiliare.com
WILD WEST DOMAINS, LLC192.124.249.107 (- United States)
2016-12-15 06:46Distribution SiteLocky
test.maciejdudek.com.pl
Domeny.pl sp. z o.o.91.225.28.120 (- Poland)
2016-12-15 06:46Distribution SiteLocky
dev.bychancefarm.com
DREAMHOST, LLC (n/a)
2016-12-15 06:45Distribution SiteLocky
killdoors.myjino.ru
R01-RU81.177.141.242 (- Russian Federation)
2016-12-15 06:45Distribution SiteLocky
puzzrollrings.com
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-12-15 06:45Distribution SiteLocky
dcipostdoc.com
GODADDY.COM, LLC203.162.53.106 (- Vietnam)
2016-12-15 06:44Distribution SiteLocky
suivresanature.net
TUCOWS DOMAINS INC.213.246.62.39 (- France)
2016-12-15 06:44Distribution SiteLocky
catherineduret.ch
128.65.195.140 (- Switzerland)
2016-12-15 06:44Distribution SiteLocky
web-shuttle.in
GoDaddy.com, LLC (R101-AFIN)107.180.47.3 (- United States)
2016-12-15 06:44Distribution SiteLocky
terrabit.ro
ICI - ROTLD89.40.36.58 (- Romania)
2016-12-15 06:43Distribution SiteLocky
mechanikkapusta.pl
WMK Invest Sp. z o.o.31.186.82.141 (- Poland)
2016-12-15 06:43Distribution SiteLocky
scaune.qmagazin.ro
Romarg SRL93.115.108.232 (- Romania)
2016-12-15 06:42Distribution SiteLocky
crolic88.myjino.ru
R01-RU81.177.139.41 (- Russian Federation)
2016-12-15 06:42Distribution SiteLocky
quanuvcut.com
NHAN HOA SOFTWARE COMPANY LTD209.99.40.223 (- United States)
2016-12-15 06:42Distribution SiteLocky
www.convertus.com
GODADDY.COM, LLC216.129.207.43 (- Canada)
2016-12-15 06:42Distribution SiteLocky
blackswan.com.ng
Upperlink Limited (n/a)
2016-12-15 06:42Distribution SiteLocky
tecnomundo.uy
173.236.44.34 (- United States)
2016-12-15 06:41Distribution SiteLocky
transunvip.com
CHENGDU WEST DIMENSION DIGITAL T[...]50.117.113.220 (- United States)
2016-12-15 06:41Distribution SiteLocky
demo.evgesha.ru
RU-CENTER-RU95.165.159.185 (- Russian Federation)
2016-12-15 06:41Distribution SiteLocky
zzzort10xtest123.com
REGISTER.COM, INC.209.235.144.9 (- United States)
2016-12-15 06:41Distribution SiteLocky
roman64.humlak.cz
REG-ACTIVE24194.12.32.194 (- Czech Republic)
2016-12-15 06:41Distribution SiteLocky
www.vidcampaign.com
GODADDY.COM, LLC162.144.48.233 (- United States)
2016-12-15 06:40Distribution SiteLocky
vaaren.dk
94.231.108.221 (- Denmark)
2016-12-15 06:39Distribution SiteLocky
felipebueno.com
DOMAIN.COM, LLC173.244.172.42 (- United States)
2016-12-15 06:39Distribution SiteLocky
peopleprofit.in
Endurance Domains Technology Pvt[...]103.253.125.240 (- India)
2016-12-15 06:39Distribution SiteLocky
bappeda.dharmasrayakab.go.id
(n/a)
2016-12-15 06:39Distribution SiteLocky
brigma.com
NAMESILO, LLC75.136.141.1 (- United States)
2016-12-15 06:39Distribution SiteLocky
test.invideohit.ru
ARDIS-RU (n/a)
2016-12-15 06:39Distribution SiteLocky
toastmedia.co.uk
LCN.com Ltd50.116.107.239 (- United States)
2016-12-15 06:39Distribution SiteLocky
asdream.pl
Domeny.pl sp. z o.o.85.128.216.55 (- Poland)
2016-12-15 06:39Distribution SiteLocky
www.dreamlifez.com
DOMAIN.COM, LLC (n/a)
2016-12-15 06:38Distribution SiteLocky
innercityarts.squaremdesign.com
GODADDY.COM, LLC (n/a)
2016-12-15 06:38Distribution SiteLocky
anti-dust.ru
REGRU-RU91.217.9.239 (- Ukraine)
2016-12-15 06:38Distribution SiteLocky
www.iaprog.nl
Flexwebhosting BV93.188.249.201 (- Netherlands)
2016-12-15 06:38Distribution SiteLocky
backup.dressageclinic.com
DELUXE SMALL BUSINESS SALES, INC[...]192.124.249.157 (- United States)
2016-12-15 06:38Distribution SiteLocky
addwords.com.tr
188.124.3.30 (- Turkey)
2016-12-15 06:38Distribution SiteLocky
xn--k1affefe.xn--p1ai
148.251.187.239 (- Germany)
2016-12-15 06:38Distribution SiteLocky
yzwle.com
BIZCN.COM, INC.47.90.16.240 (- Canada)
2016-12-15 06:38Distribution SiteLocky
gui92.vn
103.28.38.23 (- Vietnam)
2016-12-15 06:38Distribution SiteLocky
chungcuvinhomemydinh.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]123.30.50.11 (- Vietnam)
2016-12-15 06:38Distribution SiteLocky
followmyleadatl.com
GODADDY.COM, LLC50.6.244.121 (- United States)
2016-12-15 06:37Distribution SiteLocky
wx.utaidu.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.47.82 (- China)
2016-12-15 06:36Distribution SiteLocky
xn--80ajjchqepikd1b.xn--80asehdb
(n/a)
2016-12-15 06:36Distribution SiteLocky
gratissexchat.org
GoDaddy.com, LLC (n/a)
2016-12-15 06:35Distribution SiteLocky
www.rencontreparis.org
OVH91.134.167.248 (- Bulgaria)
2016-12-15 06:35Distribution SiteLocky
172.246.84.150
n/a
2016-12-15 06:34Distribution SiteLocky
www.majorleaguesecurity.com
GODADDY.COM, LLC107.180.23.105 (- United States)
2016-12-14 16:52Distribution SiteLocky
perspektive-fuer-kinder.de
212.227.168.234 (- Germany)
2016-12-14 16:51Distribution SiteLocky
demo.ahost5.ru
REGRU-RU195.88.209.153 (- Russian Federation)
2016-12-14 16:46Distribution SiteLocky
antonbogov.com
CSL COMPUTER SERVICE LANGENBACH [...]195.206.228.46 (- Slovenia)
2016-12-14 12:28Botnet C&CLocky
193.70.86.51
193.70.86.51 (- Italy)
2016-12-14 11:57Distribution SiteLocky
amaniinitiative.org
Domain.com, LLC198.105.221.209 (- United States)
2016-12-14 11:57Distribution SiteLocky
rkf3460.dk
46.30.213.44 (- Denmark)
2016-12-14 11:57Distribution SiteLocky
lntproductions.com
123-REG LIMITED94.136.40.103 (- United Kingdom)
2016-12-14 11:57Distribution SiteLocky
old.strommarnas.se
SE Direkt212.16.161.137 (- Sweden)
2016-12-14 11:57Distribution SiteLocky
avtomoika23.ru
RU-CENTER-RU92.53.96.129 (- Russian Federation)
2016-12-14 11:56Distribution SiteLocky
m.cuisines-aviva.com
OVH213.186.33.4 (- France)
2016-12-14 11:56Distribution SiteLocky
o-migunova.myjino.ru
R01-RU81.177.135.211 (- Russian Federation)
2016-12-14 11:56Distribution SiteLocky
demo.ghwchina.com
HICHINA ZHICHENG TECHNOLOGY LTD.101.201.148.61 (- China)
2016-12-14 11:56Distribution SiteLocky
www.jebbenterprises.com
TUCOWS DOMAINS INC.64.34.157.140 (- United States)
2016-12-14 11:56Distribution SiteLocky
downloadform.net
BIGROCK SOLUTIONS LIMITED (n/a)
2016-12-14 11:56Distribution SiteLocky
sstaswim.com
ENOM, INC. (n/a)
2016-12-14 11:56Distribution SiteLocky
demo.fishtime.com.ua
91.239.232.208 (- Ukraine)
2016-12-14 11:56Distribution SiteLocky
pacworld.com
ENOM, INC.104.247.75.8 (- United States)
2016-12-14 11:55Distribution SiteLocky
store.elixe.net
REGIONAL NETWORK INFORMATION CEN[...] (n/a)
2016-12-14 11:55Distribution SiteLocky
test.easynet.net.au
Enetica (n/a)
2016-12-14 11:55Distribution SiteLocky
dryerventexpress.com
GODADDY.COM, LLC74.220.215.235 (- United States)
2016-12-14 11:55Distribution SiteLocky
alexandergorban.com
GODADDY.COM, LLC199.217.112.201 (- United States)
2016-12-14 11:54Distribution SiteLocky
test.verox.dk
94.231.103.147 (- Denmark)
2016-12-14 11:54Distribution SiteLocky
kayamuh.sarf.com.tr
77.245.149.11 (- Turkey)
2016-12-14 11:54Distribution SiteLocky
shortsuey.com
GODADDY.COM, LLC160.153.16.36 (- United States)
2016-12-14 11:54Distribution SiteLocky
ledticket.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]62.210.203.59 (- France)
2016-12-14 11:54Distribution SiteLocky
watchmeninc.com
GODADDY.COM, LLC208.97.190.174 (- United States)
2016-12-14 11:54Distribution SiteLocky
andrey.goldfine.ru
RU-CENTER-RU213.133.98.250 (- Germany)
2016-12-14 11:53Distribution SiteLocky
dg.gamebuffet.mobi
GoDaddy.com, LLC111.90.139.89 (- Malaysia)
2016-12-14 11:53Distribution SiteLocky
adiosalvello.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]185.14.56.96 (- Spain)
2016-12-14 11:53Distribution SiteLocky
hotmusic.vipereskariot.ru
R01-RU81.177.141.15 (- Russian Federation)
2016-12-14 11:53Distribution SiteLocky
test.yanying100.com
GUANGDONG JINWANBANG TECHNOLOGY [...] (n/a)
2016-12-14 11:53Distribution SiteLocky
welovetofish.org
GoDaddy.com, LLC162.144.5.170 (- United States)
2016-12-14 11:52Distribution SiteLocky
mhmchicago.com
GODADDY.COM, LLC (n/a)
2016-12-14 11:52Distribution SiteLocky
giftoflife.nl
Registrar.eu181.224.130.230 (- United States)
2016-12-14 11:52Distribution SiteLocky
new.craescuela.net
INTERDOMINIOS, INC. (n/a)
2016-12-14 11:52Distribution SiteLocky
dicksmacker.com
GODADDY.COM, LLC184.168.221.32 (- United States)
2016-12-14 11:51Distribution SiteLocky
leonsi.eu
Tucows.com Co.198.58.93.20 (- United States)
2016-12-14 11:51Distribution SiteLocky
lucapotenziani.com
TUCOWS DOMAINS INC.82.223.67.107 (- Spain)
2016-12-14 11:51Distribution SiteLocky
mintthaicafe.com
1&1 INTERNET SE74.208.113.182 (- United States)
2016-12-14 11:51Distribution SiteLocky
gizlot.com
GODADDY.COM, LLC198.58.93.20 (- United States)
2016-12-14 11:51Distribution SiteLocky
e-pin.gr
(n/a)
2016-12-14 11:51Distribution SiteLocky
tocotrucking.com
NETWORK SOLUTIONS, LLC.50.87.121.237 (- United States)
2016-12-14 11:50Distribution SiteLocky
akkugarancia.hu
195.56.148.225 (- Hungary)
2016-12-14 11:50Distribution SiteLocky
mijnknwu.knwu.nl
Cloud VPS B.V.85.222.230.49 (- Netherlands)
2016-12-14 11:50Distribution SiteLocky
demo.pornuha4you.com
DOMAINCONTEXT, INC. (n/a)
2016-12-14 11:50Distribution SiteLocky
safataj.ir
185.94.99.114 (- Iran)
2016-12-14 11:50Distribution SiteLocky
nordvelay.fr
NUXIT (n/a)
2016-12-14 11:50Distribution SiteLocky
ypgg.kr
119.30.138.158 (- Korea)

# of rows displayed: 100
# of entries in database: 9'211

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 >