Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-19 14:01Distribution SiteLocky
audreyetsteve.fr
OVH37.187.126.106 (- France)
2016-12-19 14:01Distribution SiteLocky
brainfreezeapp.com
GODADDY.COM, LLC (n/a)
2016-12-19 14:01Distribution SiteLocky
bperes.com.br
187.45.240.114 (- Brazil)
2016-12-19 14:01Distribution SiteLocky
www.neumayr-alkoven.com
WORLD4YOU INTERNET SERVICES GMBH34.194.244.120 (- United States) +1 A record(s) 52.205.67.62 (AS14618, - United States)
2016-12-19 14:01Distribution SiteLocky
birdhausdesign.com
DOMAINPEOPLE, INC.64.71.33.17 (- United States)
2016-12-19 14:01Distribution SiteLocky
garosero5.com
KOREA SERVER HOSTING INC.218.38.136.90 (- Korea)
2016-12-19 14:00Distribution SiteLocky
as-kanal-rohrreinigung.de
85.13.144.197 (- Germany)
2016-12-19 14:00Distribution SiteLocky
www.globalchristiantrust.com
123-REG LIMITED164.177.154.130 (- United Kingdom)
2016-12-19 14:00Distribution SiteLocky
factoryfreeapparel.com
1&1 INTERNET SE (n/a)
2016-12-18 13:20Botnet C&CLocky
dolfexalto.com
GRANSY S.R.O D/B/A SUBREG.CZ185.162.8.94 (- Netherlands)
2016-12-18 08:02Payment SiteCerber
ffoqr3ug7m726zou.13inb1.top
Eranet International Limited (n/a)
2016-12-18 07:46Payment SiteCerber
avsxrcoq2q5fgrw2.13inb1.top
Eranet International Limited (n/a)
2016-12-18 07:26Payment SiteCerber
pe2cku7pebkpgeko.13inb1.top
Eranet International Limited (n/a)
2016-12-18 03:46Payment SiteCerber
fnmi62725zfti2vy.13inb1.top
Eranet International Limited (n/a)
2016-12-16 17:15Distribution SiteLocky
kirulya.com
GODADDY.COM, LLC37.48.103.240 (- Netherlands)
2016-12-16 17:15Distribution SiteLocky
www.servipisos.com.ar
190.105.238.43 (- Argentina)
2016-12-16 17:15Distribution SiteLocky
kayamuh.sarf.com.tr
(n/a)
2016-12-16 17:15Distribution SiteLocky
ilasd.org
GoDaddy.com, LLC130.211.230.135 (- United States)
2016-12-16 17:15Distribution SiteLocky
store.elixe.net
REGIONAL NETWORK INFORMATION CEN[...] (n/a)
2016-12-16 17:15Distribution SiteLocky
auto-zakaz.com.ua
91.218.212.49 (- Ukraine)
2016-12-16 17:15Distribution SiteLocky
aaryn.net
GODADDY.COM, LLC (n/a)
2016-12-16 17:14Distribution SiteLocky
profitmonster.com
NETWORK SOLUTIONS, LLC.216.53.144.11 (- United States)
2016-12-16 17:14Distribution SiteLocky
fiddlefire.net
IN2NET NETWORK, INC.69.161.143.24 (- Canada)
2016-12-16 17:14Distribution SiteLocky
www.lauraleedonnelly.com
GODADDY.COM, LLC23.235.207.151 (- United States)
2016-12-16 17:14Distribution SiteLocky
topstoneisland.com
HICHINA ZHICHENG TECHNOLOGY LTD.165.231.2.250 (- Seychelles)
2016-12-16 17:13Distribution SiteLocky
nonblockservice08.info
Todaynic.com, Inc. (n/a)
2016-12-16 17:13Distribution SiteLocky
028cdxyk.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.42.92 (- Canada)
2016-12-16 17:13Distribution SiteLocky
pcflame.com.au
TPP Wholesale Pty Ltd103.9.170.249 (- Australia)
2016-12-16 17:13Distribution SiteLocky
billionsfamily.com
GODADDY.COM, LLC50.63.124.1 (- United States)
2016-12-16 17:13Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...]193.24.220.4 (- Ukraine)
2016-12-16 17:13Distribution SiteLocky
www.enhansit.com
DOMAIN.COM, LLC67.231.253.89 (- United States)
2016-12-16 17:13Distribution SiteLocky
test1.zrise.top
Alibaba Cloud Computing Ltd. d/b[...]60.205.162.88 (- China)
2016-12-16 17:12Distribution SiteLocky
ledticket.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]62.210.203.59 (- France)
2016-12-16 17:12Distribution SiteLocky
perspektive-fuer-kinder.de
212.227.168.234 (- Germany)
2016-12-16 17:12Distribution SiteLocky
demo.ahost5.ru
REGRU-RU195.88.209.153 (- Russian Federation)
2016-12-16 17:12Distribution SiteLocky
www.mywoc.ca
Tucows.com Co.143.95.63.253 (- United States)
2016-12-16 17:11Distribution SiteLocky
calderon.com.mx
Akky (Una division de NIC Mexico[...]187.217.78.216 (- Mexico)
2016-12-16 17:11Distribution SiteLocky
promgazenergo34.ru
REGRU-RU91.121.62.162 (- France)
2016-12-16 17:11Distribution SiteLocky
demo.pornuha4you.com
DOMAINCONTEXT, INC. (n/a)
2016-12-16 17:11Distribution SiteLocky
dryerventexpress.com
GODADDY.COM, LLC74.220.215.235 (- United States)
2016-12-16 17:11Distribution SiteLocky
pta-babel.net
CV. RUMAHWEB INDONESIA103.247.9.134 (- Indonesia)
2016-12-16 17:11Distribution SiteLocky
mainlinecarriers.co.tz
REG-XTREME75.102.24.241 (- United States)
2016-12-16 17:11Distribution SiteLocky
taladm.ru
RU-CENTER-RU80.82.59.31 (- Russian Federation)
2016-12-16 17:11Distribution SiteLocky
banhang123.com
GMO INTERNET, INC. DBA ONAMAE.CO[...] (n/a)
2016-12-16 17:10Distribution SiteLocky
theexcelconsultant.com
PROMO PEOPLE, INC.65.39.193.50 (- United States)
2016-12-16 17:10Distribution SiteLocky
yellowstudio.pl
Agnat Sp. z o.o.93.157.100.71 (- Poland)
2016-12-16 17:10Distribution SiteLocky
archibaldmicrobrasserie.ca
CSC Corporate Domains (Canada) C[...]96.30.42.73 (- United States)
2016-12-16 17:09Distribution SiteLocky
www.englishworld.it
REGDOM-REG83.147.116.151 (- Italy)
2016-12-16 17:09Distribution SiteLocky
thomas-christ.de
212.144.99.228 (- Germany)
2016-12-16 11:57Distribution SiteLocky
ebreckinteriors.com
GODADDY.COM, LLC50.63.101.1 (- United States)
2016-12-16 11:57Distribution SiteLocky
alock.co
GODADDY.COM, INC.109.199.98.21 (- United States)
2016-12-16 11:57Distribution SiteLocky
kurou.bokunenjin.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-12-16 11:57Distribution SiteLocky
infosys.co.kr
211.62.35.121 (- Korea)
2016-12-16 11:56Distribution SiteLocky
shomesofa.com
GODADDY.COM, LLC112.78.10.7 (- Vietnam)
2016-12-16 11:56Distribution SiteLocky
s437702314.onlinehome.us
1&1 INTERNET SE192.195.77.151 (- United States)
2016-12-16 11:56Distribution SiteLocky
masonlodgestpeter.org
Network Solutions, LLC216.114.192.21 (- United States)
2016-12-16 11:56Distribution SiteLocky
brookstonemanuals.com
DREAMHOST, LLC66.33.212.51 (- United States)
2016-12-16 11:56Distribution SiteLocky
www.tourist-car.ru
REGRU-RU89.111.176.155 (- Russian Federation)
2016-12-16 11:56Distribution SiteLocky
rdsc-seminar.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]150.95.255.38 (- Japan)
2016-12-16 11:56Distribution SiteLocky
amaniinitiative.org
Domain.com, LLC198.105.221.209 (- United States)
2016-12-16 11:56Distribution SiteLocky
tunca.bel.tr
94.102.7.199 (- Turkey)
2016-12-16 11:55Distribution SiteLocky
qe7.ca
Promo People Inc. (n/a)
2016-12-16 11:55Distribution SiteLocky
mprotectcorp.com
ADVANCED INTERNET TECHNOLOGIES, [...]216.117.177.82 (- United States)
2016-12-16 11:55Distribution SiteLocky
mgascca.com
GODADDY.COM, LLC107.180.57.9 (- United States)
2016-12-16 11:55Distribution SiteLocky
s435378127.online-home.ca
Domain Robot Enterprises Inc.192.195.77.145 (- United States)
2016-12-16 11:55Distribution SiteLocky
gallery.mohammadtarighi.ir
46.4.22.188 (- Germany)
2016-12-16 11:55Distribution SiteLocky
obccllc.com
GODADDY.COM, LLC66.191.108.110 (- United States)
2016-12-16 11:55Distribution SiteLocky
nortra-cables.com
GODADDY.COM, LLC184.168.207.1 (- United States)
2016-12-16 11:55Distribution SiteLocky
infinitecorp.ca
Go Daddy Domains Canada, Inc199.116.216.169 (- Canada)
2016-12-16 11:54Distribution SiteLocky
www.thepasobueno.com
TUCOWS DOMAINS INC. (n/a)
2016-12-16 11:54Distribution SiteLocky
hho68.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-12-16 11:54Distribution SiteLocky
akida.com
GODADDY.COM, LLC107.180.55.220 (- United States)
2016-12-16 11:54Distribution SiteLocky
houssiere.daniel.formations-web.alsace
GANDI195.154.173.226 (- France)
2016-12-16 11:54Distribution SiteLocky
old.strommarnas.se
SE Direkt212.16.161.137 (- Sweden)
2016-12-16 11:54Distribution SiteLocky
s393640255.onlinehome.us
1&1 Internet SE216.250.120.67 (- United States)
2016-12-16 11:54Botnet C&CLocky
83.220.172.182
83.220.172.182 (- Russian Federation)
2016-12-16 11:54Distribution SiteLocky
mbdvacations.com
WILD WEST DOMAINS, LLC199.116.78.152 (- United States)
2016-12-16 11:54Distribution SiteLocky
www.sapol.it
REGISTER-REG83.103.119.52 (- Italy)
2016-12-16 11:54Distribution SiteLocky
www.zscio.com
XIN NET TECHNOLOGY CORPORATION107.161.94.157 (- United States)
2016-12-16 11:53Distribution SiteLocky
www.dazzle-events.be
Systray Solutions BVBA185.162.30.200 (- Belgium)
2016-12-16 11:31Distribution SiteLocky
www.lauraleedonnelly.com
GODADDY.COM, LLC23.235.207.151 (- United States)
2016-12-16 11:31Distribution SiteLocky
agyemang.com
1&1 INTERNET SE216.14.215.2 (- United States)
2016-12-16 11:31Distribution SiteLocky
www.dazzle-events.be
Systray Solutions BVBA185.162.30.200 (- Belgium)
2016-12-16 11:31Distribution SiteLocky
ktlelektro.cz
REG-WEB4U37.44.21.21 (- Czech Republic)
2016-12-16 11:31Distribution SiteLocky
www.tourist-car.ru
REGRU-RU89.111.176.155 (- Russian Federation)
2016-12-16 11:31Distribution SiteLocky
image.ddianle.com
HICHINA ZHICHENG TECHNOLOGY LTD.202.75.220.31 (- China) +1 A record(s) 202.75.220.32 (AS4837, - China)
2016-12-16 11:30Distribution SiteLocky
mprotectcorp.com
ADVANCED INTERNET TECHNOLOGIES, [...]216.117.177.82 (- United States)
2016-12-16 11:30Distribution SiteLocky
akida.com
GODADDY.COM, LLC107.180.55.220 (- United States)
2016-12-16 11:30Distribution SiteLocky
medianisprint.com
NETWORK SOLUTIONS, LLC.89.140.111.167 (- Spain)
2016-12-16 11:30Distribution SiteLocky
seaf.ch
92.43.216.117 (- Switzerland)
2016-12-16 11:30Distribution SiteLocky
www.enhansit.com
DOMAIN.COM, LLC67.231.253.89 (- United States)
2016-12-16 11:30Distribution SiteLocky
kh2.co.uk
Plusnet Plc t/a Just-the-Name185.65.42.98 (- United Kingdom)
2016-12-16 11:30Distribution SiteLocky
facerecognition.com.ba
195.222.33.173 (- Bosnia and Herzegovina)
2016-12-16 11:30Distribution SiteLocky
2picme.com
TUCOWS DOMAINS INC.98.130.240.209 (- United States)
2016-12-16 11:30Distribution SiteLocky
kathymerrill.com
NETWORK SOLUTIONS, LLC.50.115.120.132 (- United States)
2016-12-16 11:30Distribution SiteLocky
www.thepasobueno.com
TUCOWS DOMAINS INC. (n/a)
2016-12-16 11:30Distribution SiteLocky
xiaojinsong.com
SHANGHAI MEICHENG TECHNOLOGY INF[...]218.207.110.161 (- China)
2016-12-16 11:29Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...]193.24.220.4 (- Ukraine)
2016-12-16 11:29Distribution SiteLocky
perspektive-fuer-kinder.de
212.227.168.234 (- Germany)
2016-12-16 11:29Distribution SiteLocky
kurou.bokunenjin.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)

# of rows displayed: 100
# of entries in database: 12'825

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >