Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-27 05:20Distribution SiteLocky
minevitamin.com
NAME.COM, INC.103.233.194.240 (- Thailand)
2016-09-27 05:20Distribution SiteLocky
artpiked.com
PAKNIC (PRIVATE) LIMITED141.8.224.93 (- Switzerland)
2016-09-27 05:20Distribution SiteLocky
networkthai.org
PDR Ltd. d/b/a PublicDomainRegis[...]210.1.58.21 (- Thailand)
2016-09-27 05:19Distribution SiteLocky
limaxmesse.com
PAKNIC (PRIVATE) LIMITED141.8.224.93 (- Switzerland)
2016-09-27 05:19Distribution SiteLocky
venderminegocio.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]185.14.56.80 (- Spain)
2016-09-27 05:19Distribution SiteLocky
jahanexchange.com
GODADDY.COM, LLC (n/a)
2016-09-27 05:19Distribution SiteLocky
discountghd.org
GoDaddy.com, LLC210.1.60.27 (- Thailand)
2016-09-27 05:18Distribution SiteLocky
asotelepathology.org
Register.com, Inc.184.168.221.38 (- United States)
2016-09-27 05:18Distribution SiteLocky
literbest.ru
RU-CENTER-RU (n/a)
2016-09-27 05:18Distribution SiteLocky
polykarpou.com
ENOM, INC.192.254.190.167 (- United States)
2016-09-27 05:17Distribution SiteLocky
lust-vodka.com
GODADDY.COM, LLC192.124.249.4 (- United States)
2016-09-27 05:17Distribution SiteLocky
paitano.com
REGISTER.COM, INC.149.115.26.34 (- United States)
2016-09-27 05:16Distribution SiteLocky
corights.net
NAMESILO, LLC104.144.201.100 (- United States)
2016-09-27 05:16Distribution SiteLocky
snor.it
REGISTRAR-EU-REG92.48.206.117 (- Netherlands)
2016-09-27 05:15Distribution SiteLocky
extramileteam.com
GODADDY.COM, LLC107.180.41.91 (- United States)
2016-09-27 05:15Distribution SiteLocky
iloveyf.com
HICHINA ZHICHENG TECHNOLOGY LTD.59.39.177.3 (- China)
2016-09-27 05:14Distribution SiteLocky
relaywebsample.com
INTERNET DOMAIN SERVICE BS CORP (n/a)
2016-09-27 05:14Distribution SiteLocky
artpiked.com
PAKNIC (PRIVATE) LIMITED141.8.224.93 (- Switzerland)
2016-09-27 05:13Distribution SiteLocky
unstytovar.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:13Distribution SiteLocky
unstytovar.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:12Distribution SiteLocky
alexor.net
TUCOWS DOMAINS INC.174.127.106.65 (- United States)
2016-09-27 05:12Distribution SiteLocky
tpidbanjarmasin.org
PDR Ltd. d/b/a PublicDomainRegis[...]103.233.102.26 (- Indonesia)
2016-09-27 05:12Distribution SiteLocky
inform-ug.ru
REGRU-RU185.17.120.8 (- Russian Federation)
2016-09-27 05:12Distribution SiteLocky
birdemetresim.com
ONLINENIC, INC.46.20.150.160 (- Turkey)
2016-09-27 05:12Distribution SiteLocky
digital-print.ru
RU-CENTER-RU91.219.192.81 (- Russian Federation)
2016-09-27 05:11Distribution SiteLocky
zheng-du.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-09-27 05:11Distribution SiteLocky
on-point.be
IOP bvba91.223.195.242 (- Belgium)
2016-09-27 05:11Distribution SiteLocky
hlh.sk
80.94.52.24 (- Slovakia)
2016-09-27 05:11Distribution SiteLocky
clsss.ru
R01-RU (n/a)
2016-09-27 05:10Distribution SiteLocky
uredosafe.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:10Distribution SiteLocky
imagillaboration.org
FastDomain Inc.69.172.201.153 (- United States)
2016-09-27 05:10Distribution SiteLocky
residencyradio.com
ENOM, INC.87.117.225.121 (- United Kingdom)
2016-09-27 05:10Distribution SiteLocky
specnaz-ars.ru
NAUNET-RU81.177.6.231 (- Russian Federation)
2016-09-27 05:09Distribution SiteLocky
floridaautostereo.com
GODADDY.COM, LLC (n/a)
2016-09-27 05:09Distribution SiteLocky
liteklighting.com
BIZCN.COM, INC.216.227.214.98 (- United States)
2016-09-27 05:09Distribution SiteLocky
social-jump.com
GOOGLE INC. (n/a)
2016-09-27 05:09Distribution SiteLocky
xceramics.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]216.172.169.168 (- United States)
2016-09-27 05:09Distribution SiteLocky
musicbarpriatelia.sk
217.67.30.55 (- Slovakia)
2016-09-27 05:08Distribution SiteLocky
infotecx.com
CRAZY DOMAINS FZ-LLC209.212.158.66 (- United States)
2016-09-27 05:08Distribution SiteLocky
mischiefexpeditions.asia
PT ARDH Global Indonesia R209-AS[...]173.192.139.34 (- United States)
2016-09-27 05:08Distribution SiteLocky
sudep-registry.org
eNom, Inc.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-09-27 05:08Distribution SiteLocky
yourwellnessprescription.com
FASTDOMAIN, INC.66.147.244.108 (- United States)
2016-09-27 05:08Distribution SiteLocky
thomasduncanwatt.com
CRAZY DOMAINS FZ-LLC112.140.180.24 (- Australia)
2016-09-27 05:07Distribution SiteLocky
genealogy.su
RUCENTER-REG-FID89.253.254.74 (- Russian Federation)
2016-09-27 05:07Distribution SiteLocky
unmewpongo.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:07Distribution SiteLocky
judgedeborahshallcross.com
NETWORK SOLUTIONS, LLC. (n/a)
2016-09-27 05:07Distribution SiteLocky
presidenthotelthailand.com
ONLINENIC, INC.122.155.1.65 (- Thailand)
2016-09-27 05:07Distribution SiteLocky
limaxmesse.com
PAKNIC (PRIVATE) LIMITED141.8.224.93 (- Switzerland)
2016-09-27 05:06Distribution SiteLocky
simo62.web.fc2.com
INSTRA CORPORATION PTY, LTD.208.71.106.61 (- United States)
2016-09-27 05:06Distribution SiteLocky
cast4all.com
REGISTER.COM, INC.23.236.62.147 (- United States)
2016-09-27 05:06Distribution SiteLocky
prod23.ru
REGRU-RU194.58.120.238 (- Russian Federation)
2016-09-27 05:04Distribution SiteLocky
vktechs.com
GODADDY.COM, LLC166.62.28.102 (- United States)
2016-09-27 05:04Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-09-27 05:04Distribution SiteLocky
ensaenerji.com
ONLINENIC, INC.178.210.173.32 (- Turkey)
2016-09-27 05:04Distribution SiteLocky
voizplus.com
ONLINENIC, INC.210.1.51.164 (- Thailand)
2016-09-27 05:04Distribution SiteLocky
rennie-mackintosh-jewellery.co.uk
123-Reg Limited t/a 123-reg192.124.249.4 (- United States)
2016-09-27 05:03Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"79.98.26.175 (- Lithuania)
2016-09-27 05:03Distribution SiteLocky
greenshootmedia.com
GODADDY.COM, LLC192.124.249.18 (- United States)
2016-09-27 05:02Distribution SiteLocky
room8008.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.233.1.166 (- Malaysia)
2016-09-27 05:02Distribution SiteLocky
vlog24h.com
NAMESILO, LLC173.236.170.219 (- United States)
2016-09-27 05:02Distribution SiteLocky
serwing.com
GODADDY.COM, LLC52.71.185.125 (- United States) +1 A record(s) 54.172.131.220 (AS26496, - United States)
2016-09-27 05:01Distribution SiteLocky
resboiu.ro
ICI - ROTLD185.146.87.36 (- Romania)
2016-09-27 02:58Payment SiteCerber
unocl45trpuoefft.piy4l3.bid
Eranet International Limited (n/a)
2016-09-27 02:45Payment SiteCerber
unocl45trpuoefft.v50gtu.bid
Eranet International Limited (n/a)
2016-09-26 23:01Payment SiteCerber
52uo5k3t73ypjije.li8wfu.bid
Eranet International Limited (n/a)
2016-09-26 21:07Payment SiteCerber
unocl45trpuoefft.vi5iko.bid
Eranet International Limited (n/a)
2016-09-26 20:32Payment SiteCerber
52uo5k3t73ypjije.ku824r.bid
Eranet International Limited (n/a)
2016-09-26 16:15Payment SiteCerber
4kqd3hmqgptupi3p.mi3596.bid
Eranet International Limited (n/a)
2016-09-26 13:28Botnet C&CLocky
185.86.78.3
185.86.78.3 (- Ukraine)
2016-09-25 15:55Payment SiteCerber
4kqd3hmqgptupi3p.byeraser.lol
Alpnames Limited (n/a)
2016-09-25 12:31Payment SiteCerber
unocl45trpuoefft.wl8t6k.bid
Eranet International Limited (n/a)
2016-09-25 10:04Botnet C&CLocky
5.196.200.247
5.196.200.247 (- France)
2016-09-24 21:40Botnet C&CLocky
tswsgajtwhqkosd.su
REGRU-REG-FID91.239.235.130 (- Ukraine)
2016-09-24 21:40Botnet C&CLocky
jfmiondv.xyz
Registrar of Domain Names REG.RU[...]91.239.235.130 (- Ukraine)
2016-09-24 19:34Payment SiteCerber
wjtqjleommc4z46i.zclhx9.bid
Eranet International Limited (n/a)
2016-09-24 18:20Payment SiteCerber
52uo5k3t73ypjije.l6ry3h.bid
Eranet International Limited (n/a)
2016-09-24 17:14Botnet C&CLocky
xofguhypjgvxrm.pw
Namecheap208.100.26.234 (- United States)
2016-09-24 17:13Payment SiteCerber
52uo5k3t73ypjije.9cd81s.bid
Eranet International Limited (n/a)
2016-09-24 12:11Payment SiteCerber
4kqd3hmqgptupi3p.sitcalls.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-24 07:31Payment SiteCerber
wjtqjleommc4z46i.nnbdlh.bid
Eranet International Limited (n/a)
2016-09-24 01:50Payment SiteCerber
4kqd3hmqgptupi3p.holescase.pw
AlpNames Limited (n/a)
2016-09-23 18:24Payment SiteCerber
52uo5k3t73ypjije.v9y6z8.bid
Eranet International Limited (n/a)
2016-09-23 17:39Payment SiteCerber
unocl45trpuoefft.c4issd.bid
Eranet International Limited (n/a)
2016-09-23 16:53Payment SiteCerber
52uo5k3t73ypjije.ye42cp.bid
Eranet International Limited (n/a)
2016-09-23 11:29Distribution SiteLocky
melbourneacousticduo.com
TUCOWS DOMAINS INC.118.127.45.5 (- Australia)
2016-09-23 11:29Distribution SiteLocky
mahboob-e-rehmani.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]94.23.218.119 (- France)
2016-09-23 11:28Distribution SiteLocky
bro4.com
NETWORK SOLUTIONS, LLC.173.254.28.149 (- United States)
2016-09-23 11:27Distribution SiteLocky
autorijschoolpedro.nl
GoDaddy.com23.229.244.196 (- United States)
2016-09-23 11:27Distribution SiteLocky
rentalcartours.net
FASTDOMAIN, INC.143.95.230.17 (- United States)
2016-09-23 11:22Distribution SiteLocky
tmcaster.com
INTERNET DOMAIN SERVICE BS CORP27.254.62.249 (- Thailand)
2016-09-23 11:22Distribution SiteLocky
rutlandhall.com
DOMAIN.COM, LLC217.160.5.7 (- Germany)
2016-09-23 11:22Distribution SiteLocky
analeoni.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]195.210.46.17 (- Kazakhstan)
2016-09-23 11:21Distribution SiteLocky
colagens.com
GRANSY S.R.O D/B/A SUBREG.CZ (n/a)
2016-09-23 11:21Distribution SiteLocky
demo.dhrutidesign.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-23 11:20Distribution SiteLocky
iran-shik.ir
(n/a)
2016-09-23 11:19Distribution SiteLocky
ftpandina.atv.com.pe
NIC .PE190.81.57.204 (- Peru)
2016-09-23 11:18Distribution SiteLocky
purebanquet.com
GODADDY.COM, LLC166.62.53.150 (- United States)
2016-09-23 11:18Distribution SiteLocky
vmastera.ru
REGRU-RU85.17.89.54 (- Netherlands)
2016-09-23 11:18Distribution SiteLocky
alabamataskforce1.com
ENOM, INC. (n/a)
2016-09-23 11:17Distribution SiteLocky
welovekgc.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.38.80 (- Thailand)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >