Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-10-31 10:45Distribution SiteLocky
bobyfrancisandpradeep.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]75.119.201.229 (- United States)
2016-10-31 10:44Distribution SiteLocky
ri-vyoo.com
GODADDY.COM, LLC34.194.24.128 (- United States)
2016-10-31 10:41Distribution SiteLocky
oakridge-realty.com
TUCOWS DOMAINS INC.65.60.11.253 (- United States)
2016-10-31 10:40Distribution SiteLocky
fortuneprixgroup.com
GODADDY.COM, LLC50.62.214.160 (- United States)
2016-10-31 10:39Distribution SiteLocky
ajaraheritage.ge
91.212.213.29 (- Georgia)
2016-10-31 10:33Distribution SiteLocky
morenaart.com
GRANSY S.R.O D/B/A SUBREG.CZ37.9.175.21 (- Slovakia)
2016-10-31 10:31Distribution SiteLocky
devinkellerart.com
ENOM, INC. (n/a)
2016-10-31 10:29Distribution SiteLocky
rktest.net
GODADDY.COM, LLC192.185.203.204 (- United States)
2016-10-31 10:29Distribution SiteLocky
webframez.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]69.64.68.126 (- United States)
2016-10-31 10:29Distribution SiteLocky
arabian-link.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.169.59.200 (- United States)
2016-10-31 10:29Distribution SiteLocky
paulasalamanca.com
CSL COMPUTER SERVICE LANGENBACH [...]93.93.68.10 (- Spain)
2016-10-31 10:26Distribution SiteLocky
dor29.ru
REGTIME-RU (n/a)
2016-10-31 10:24Distribution SiteLocky
morenaart.com
GRANSY S.R.O D/B/A SUBREG.CZ37.9.175.21 (- Slovakia)
2016-10-31 10:24Distribution SiteLocky
grupotalents.com
ENOM, INC.143.95.75.242 (- United States)
2016-10-31 10:23Distribution SiteLocky
haydistributing.com
GODADDY.COM, LLC199.83.129.11 (- United States) +1 A record(s) 199.83.131.11 (AS26496, - United States)
2016-10-31 10:22Distribution SiteLocky
thungchang.go.th
T.H.NIC Co., Ltd.119.59.104.26 (- Thailand)
2016-10-31 10:21Distribution SiteLocky
cetinakademi.com
FBS INC.185.8.128.41 (- Turkey)
2016-10-31 10:19Distribution SiteLocky
newdawnexperience.com
GODADDY.COM, LLC107.180.3.61 (- United States)
2016-10-31 10:18Distribution SiteLocky
nixvector.com
NET 4 INDIA LIMITED204.11.56.48 (- Virgin Islands)
2016-10-31 10:17Distribution SiteLocky
dapos.ru
REGRU-RU37.140.192.207 (- Russian Federation)
2016-10-31 03:54Payment SiteCerber
vyohacxzoue32vvk.6wkz70.bid
Eranet International Limited (n/a)
2016-10-30 21:36Botnet C&CLocky
wtxvmsikbmtbq.pw
Namecheap208.100.26.234 (- United States)
2016-10-30 21:36Botnet C&CLocky
185.5.250.135
185.5.250.135 (- Russian Federation)
2016-10-30 20:18Payment SiteCerber
ffoqr3ug7m726zou.wf912u.bid
Eranet International Limited (n/a)
2016-10-30 07:37Payment SiteCerber
ffoqr3ug7m726zou.0v7hry.bid
Eranet International Limited (n/a)
2016-10-29 12:29Payment SiteCerber
ffoqr3ug7m726zou.do9wwg.top
Eranet International Limited (n/a)
2016-10-29 11:37Payment SiteCerber
vyohacxzoue32vvk.34o9h1.bid
Eranet International Limited (n/a)
2016-10-29 10:05Payment SiteCerber
ahuqfrqk54v3vnzj.dxzr2l.top
Eranet International Limited (n/a)
2016-10-29 04:53Payment SiteCerber
xrhwryizf5mui7a5.g72xh8.top
Eranet International Limited (n/a)
2016-10-29 00:35Botnet C&CLocky
acjhwpdjhlhbncf.click
NAMECHEAP208.100.26.234 (- United States)
2016-10-28 16:24Botnet C&CLocky
yavmxpiqfwmubk.pw
Namecheap208.100.26.234 (- United States)
2016-10-28 16:07Botnet C&CLocky
wbaskcsxiffiax.info
Dynadot, LLC69.195.129.70 (- United States)
2016-10-28 14:51Payment SiteCerber
vyohacxzoue32vvk.0ot7em.bid
Eranet International Limited (n/a)
2016-10-28 13:51Payment SiteCerber
vyohacxzoue32vvk.roep3o.top
Eranet International Limited (n/a)
2016-10-28 11:58Distribution SiteLocky
zizicamarda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.136.54.70 (- United States)
2016-10-28 11:57Distribution SiteLocky
payserairan.com
GODADDY.COM, LLC50.63.202.15 (- United States)
2016-10-28 11:57Distribution SiteLocky
bytextreme.com
WINGU NETWORKS, S.A DE C.V.67.23.237.79 (- United States)
2016-10-28 11:54Distribution SiteLocky
tradium.com.mx
NEUBOX Internet SA de CV67.23.236.143 (- United States)
2016-10-28 11:53Distribution SiteLocky
esnaftansatlik.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.71.216.182 (- Cyprus)
2016-10-28 11:52Distribution SiteLocky
blog.webskitters.com
BIGROCK SOLUTIONS LIMITED173.193.105.245 (- United States) +1 A record(s) 192.240.163.29 (AS36444, - United States)
2016-10-28 11:51Distribution SiteLocky
2014.taktik-id.ch
80.74.152.150 (- Switzerland)
2016-10-28 11:47Distribution SiteLocky
shreemahalaxmiagro.com
GODADDY.COM, LLC166.62.27.134 (- United States)
2016-10-28 11:46Distribution SiteLocky
armcoinfrared.com
GODADDY.COM, LLC66.117.14.109 (- United States)
2016-10-28 11:42Distribution SiteLocky
uscpl.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]132.148.24.162 (- United States)
2016-10-28 11:42Distribution SiteLocky
ecolotienda.com
ENOM, INC.67.23.237.79 (- United States)
2016-10-28 11:41Distribution SiteLocky
dmg-properties.com
GODADDY.COM, LLC192.185.191.128 (- United States)
2016-10-28 11:37Distribution SiteLocky
pr.moi.go.th
T.H.NIC Co., Ltd.103.28.100.4 (- Thailand)
2016-10-28 11:37Distribution SiteLocky
tcmrecipe.com
ENOM, INC.192.124.249.168 (- United States)
2016-10-28 11:37Distribution SiteLocky
energietool.susteen.nl
Byte B.V.213.222.15.38 (- Netherlands)
2016-10-28 11:36Distribution SiteLocky
jasonvergara.com
CRAZY DOMAINS FZ-LLC163.53.229.3 (- Australia)
2016-10-28 11:34Distribution SiteLocky
givbee.com
GODADDY.COM, LLC107.154.105.168 (- United States)
2016-10-28 11:33Distribution SiteLocky
charlesworth.com.ng
Upperlink Limited107.180.25.166 (- United States)
2016-10-28 11:33Distribution SiteLocky
brinktest.com
TUCOWS DOMAINS INC.69.28.199.70 (- Canada)
2016-10-28 11:32Distribution SiteLocky
site4.pulusajans.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-10-28 11:31Distribution SiteLocky
accessdr.com
ENOM, INC.192.254.155.83 (- United States)
2016-10-28 11:29Distribution SiteLocky
latiendadelalujuria.com
WINGU NETWORKS, S.A DE C.V.67.23.240.101 (- United States)
2016-10-28 11:24Distribution SiteLocky
sne.bydgoszcz.pl
Michau Enterprises Ltd.188.116.15.115 (- Poland)
2016-10-28 11:21Distribution SiteLocky
vitasave.ca
Go Daddy Domains Canada, Inc192.124.249.18 (- United States)
2016-10-28 11:20Distribution SiteLocky
modelpayments.net
WILD WEST DOMAINS, LLC192.254.206.5 (- United States)
2016-10-28 11:19Distribution SiteLocky
fshr.al
192.185.160.43 (- United States)
2016-10-28 11:18Distribution SiteLocky
mexusconsulting.com
WILD WEST DOMAINS, LLC199.34.228.59 (- United States)
2016-10-28 11:17Distribution SiteLocky
radiantstars.org
GoDaddy.com, LLC50.87.113.38 (- United States)
2016-10-28 11:17Distribution SiteLocky
accademiamoda.com
GODADDY.COM, LLC192.185.5.131 (- United States)
2016-10-28 11:17Distribution SiteLocky
empirek9.com
GODADDY.COM, LLC107.180.0.8 (- United States)
2016-10-28 11:16Distribution SiteLocky
thingsandsuch.co.uk
1 & 1 Internet SE212.227.247.51 (- Germany)
2016-10-28 11:16Distribution SiteLocky
ryseinteractive.com
FASTDOMAIN, INC.23.235.221.133 (- United States)
2016-10-28 11:15Distribution SiteLocky
88.150.144.236
n/a
2016-10-28 11:10Distribution SiteLocky
dominatetheplate.com
GODADDY.COM, LLC192.185.225.117 (- United States)
2016-10-28 11:10Distribution SiteLocky
chefsmart.com
GODADDY.COM, LLC192.200.182.9 (- United States)
2016-10-28 11:10Distribution SiteLocky
vintageprintable.com
GODADDY.COM, LLC (n/a)
2016-10-28 11:10Distribution SiteLocky
socialcampaigns.co.in
GoDaddy.com, LLC (R101-AFIN)216.246.79.43 (- United States)
2016-10-28 11:05Distribution SiteLocky
walkprint.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-10-28 11:05Distribution SiteLocky
grandmar.nextmp.net
TUCOWS DOMAINS INC.192.64.53.192 (- United States)
2016-10-28 11:04Distribution SiteLocky
jobsdeed.com
GODADDY.COM, LLC160.153.32.38 (- United States)
2016-10-28 10:51Distribution SiteLocky
dolutesisat.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]185.12.110.27 (- Turkey)
2016-10-28 10:50Distribution SiteLocky
rentadeplantaselectricas.com
WINGU NETWORKS, S.A DE C.V.67.23.237.79 (- United States)
2016-10-28 10:49Distribution SiteLocky
hellomissdance.com
CHENGDU FLY-DIGITAL TECHNOLOGY C[...]114.80.211.43 (- China)
2016-10-28 10:48Distribution SiteLocky
bikemielec.com
FASTDOMAIN, INC.178.32.149.185 (- Poland)
2016-10-28 10:47Distribution SiteLocky
agrobiciuffa.com.ar
181.224.130.219 (- Panama)
2016-10-28 10:47Distribution SiteLocky
bruehwiler.ch
80.74.152.150 (- Switzerland)
2016-10-28 10:47Distribution SiteLocky
clinicaharvard.com
TUCOWS DOMAINS INC.198.46.82.242 (- United States)
2016-10-28 10:47Distribution SiteLocky
vibrantdeal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]50.87.132.222 (- United States)
2016-10-28 10:47Distribution SiteLocky
00005ik.rcomhost.com
NETWORK SOLUTIONS, LLC.206.188.193.86 (- United States)
2016-10-28 10:46Distribution SiteLocky
cemiselbiseleri.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.71.216.182 (- Cyprus)
2016-10-28 10:46Distribution SiteLocky
joshdult.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-10-28 10:46Distribution SiteLocky
primermundo.net
TUCOWS DOMAINS INC.67.23.237.79 (- United States)
2016-10-28 10:45Distribution SiteLocky
zlotysalmo.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-10-28 10:44Distribution SiteLocky
lolitojr.com.mx
Interplanet S.A de C.V.67.23.237.79 (- United States)
2016-10-28 10:44Distribution SiteLocky
arc.com.pk
210.56.18.42 (- Pakistan)
2016-10-28 10:44Distribution SiteLocky
artmusic.dk
94.231.103.90 (- Denmark)
2016-10-28 10:43Distribution SiteLocky
chanet.jp
210.196.232.211 (- Japan)
2016-10-28 10:43Distribution SiteLocky
caraudiogdl.com
ENOM, INC. (n/a)
2016-10-28 10:43Distribution SiteLocky
plookseri.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-28 10:43Distribution SiteLocky
eipldevelopers.com
DOMAIN.COM, LLC162.144.45.54 (- United States)
2016-10-28 10:43Distribution SiteLocky
shop.ukrtk.com
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-10-28 10:42Distribution SiteLocky
dlmweddings.com
NETWORK SOLUTIONS, LLC.184.154.247.95 (- United States)
2016-10-28 10:42Distribution SiteLocky
edhalper.it
1API-REG (n/a)
2016-10-28 10:42Distribution SiteLocky
plookseri.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-28 10:41Distribution SiteLocky
122.15.8.163
n/a
2016-10-28 10:40Distribution SiteLocky
ilmdesign.com
FASTDOMAIN, INC. (n/a)

# of rows displayed: 100
# of entries in database: 12'877

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >