Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-16 08:13Distribution SiteLocky
gwerucity.org.zw
(n/a)
2016-12-16 08:13Distribution SiteLocky
1688daigou.com
GODADDY.COM, LLC47.90.23.138 (- Hong Kong)
2016-12-16 08:13Distribution SiteLocky
store.elixe.net
REGIONAL NETWORK INFORMATION CEN[...] (n/a)
2016-12-16 08:13Distribution SiteLocky
www.chocolaterie-servant.com
OVH52.59.121.37 (- Germany)
2016-12-16 08:13Distribution SiteLocky
mainlinecarriers.co.tz
REG-XTREME75.102.24.241 (- United States)
2016-12-16 08:13Distribution SiteLocky
www.sapol.it
REGISTER-REG83.103.119.52 (- Italy)
2016-12-16 08:13Distribution SiteLocky
dicksmacker.com
GODADDY.COM, LLC184.168.221.40 (- United States)
2016-12-16 08:13Distribution SiteLocky
amaniinitiative.org
Domain.com, LLC198.105.221.209 (- Singapore)
2016-12-16 08:12Distribution SiteLocky
houssiere.daniel.formations-web.alsace
GANDI195.154.173.226 (- France)
2016-12-16 08:12Distribution SiteLocky
ustadhanif.com
ENOM, INC.208.75.151.108 (- United States)
2016-12-16 08:12Distribution SiteLocky
demo.pornuha4you.com
DOMAINCONTEXT, INC. (n/a)
2016-12-16 08:12Distribution SiteLocky
dealspari.com
REBEL.COM CORP.172.99.89.235 (- United States)
2016-12-16 08:12Distribution SiteLocky
infinitecorp.ca
Go Daddy Domains Canada, Inc199.116.216.169 (- Canada)
2016-12-16 08:12Distribution SiteLocky
zhongguanjiaoshi.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.133.42 (- China)
2016-12-16 08:12Distribution SiteLocky
test1.zrise.top
Alibaba Cloud Computing Ltd. d/b[...]60.205.162.88 (- China)
2016-12-16 08:11Distribution SiteLocky
bvntech.com
TLDS, LLC DBA SRSPLUS27.0.14.139 (- Vietnam)
2016-12-16 08:11Distribution SiteLocky
formatwerbung.de
80.78.160.110 (- Germany)
2016-12-16 08:11Distribution SiteLocky
testlife.ruyigou.com
HICHINA ZHICHENG TECHNOLOGY LTD.220.243.235.201 (- China) +1 A record(s) 220.243.237.154 (AS54994, - China)
2016-12-16 08:11Distribution SiteLocky
artcoredesign.com
MONIKER ONLINE SERVICES LLC174.123.132.242 (- United States)
2016-12-16 08:11Distribution SiteLocky
demo.ahost5.ru
REGRU-RU195.88.209.153 (- Russian Federation)
2016-12-16 08:11Distribution SiteLocky
allan.multimediedesignerskive.dk
212.97.132.126 (- Denmark)
2016-12-16 08:11Distribution SiteLocky
www.boldrini.org.br
191.252.47.37 (- Brazil)
2016-12-16 08:11Distribution SiteLocky
honestflooring.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]43.241.73.185 (- Hong Kong)
2016-12-16 08:11Distribution SiteLocky
ledticket.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]62.210.203.59 (- France)
2016-12-16 08:11Distribution SiteLocky
028cdxyk.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.42.92 (- Hong Kong)
2016-12-16 08:10Distribution SiteLocky
auto-zakaz.com.ua
91.218.212.49 (- Ukraine)
2016-12-16 08:10Distribution SiteLocky
thezenatwork.com
NAME.COM, INC.74.116.84.200 (- United States)
2016-12-16 08:10Distribution SiteLocky
kayamuh.sarf.com.tr
(n/a)
2016-12-16 08:10Distribution SiteLocky
elevationmusic.de
46.252.16.148 (- Germany)
2016-12-16 08:10Distribution SiteLocky
topstoneisland.com
HICHINA ZHICHENG TECHNOLOGY LTD.165.231.2.250 (- Seychelles)
2016-12-16 08:10Distribution SiteLocky
dryerventexpress.com
GODADDY.COM, LLC74.220.215.235 (- United States)
2016-12-16 08:10Distribution SiteLocky
2lazy4u.de
85.214.86.64 (- Germany)
2016-12-16 08:10Distribution SiteLocky
hho68.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-12-16 08:10Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.45.56.216.10 (- Canada)
2016-12-16 08:09Distribution SiteLocky
atelier-coccolino.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]153.120.74.128 (- Japan)
2016-12-16 08:09Distribution SiteLocky
zapotech.com
GODADDY.COM, LLC (n/a)
2016-12-16 08:09Distribution SiteLocky
mbdvacations.com
WILD WEST DOMAINS, LLC199.116.78.152 (- United States)
2016-12-16 08:09Distribution SiteLocky
lucapotenziani.com
TUCOWS DOMAINS INC.82.223.67.107 (- Spain)
2016-12-16 08:09Distribution SiteLocky
www.englishworld.it
REGDOM-REG83.147.116.151 (- Italy)
2016-12-16 08:09Distribution SiteLocky
obccllc.com
GODADDY.COM, LLC66.191.108.110 (- United States)
2016-12-16 08:09Distribution SiteLocky
blueprint-dsg.com
DATTATEC.COM SRL191.252.44.210 (- Brazil)
2016-12-16 08:08Distribution SiteLocky
gieslerdavies.com
EASYSPACE LTD.80.82.122.172 (- United Kingdom)
2016-12-16 08:08Distribution SiteLocky
chonamyoung.com
MEGAZONE CORP. DBA HOSTING.KR114.108.175.185 (- Korea)
2016-12-16 08:08Distribution SiteLocky
cprsim.com
TUCOWS DOMAINS INC.72.52.183.162 (- United States)
2016-12-16 08:08Distribution SiteLocky
www.kottalgenealogy.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.28.0.125 (- United States) +1 A record(s) 104.28.1.125 (AS13335, - United States)
2016-12-16 08:08Distribution SiteLocky
seven-cards.com
REALTIME REGISTER BV148.251.128.243 (- Germany)
2016-12-16 08:01Distribution SiteLocky
test.3ks.nl
The Registrar Company B.V.5.61.248.107 (- Netherlands)
2016-12-16 08:01Distribution SiteLocky
brigma.com
NAMESILO, LLC75.136.141.1 (- United States)
2016-12-16 08:00Distribution SiteLocky
xn--80ajjchqepikd1b.xn--80asehdb
(n/a)
2016-12-16 08:00Distribution SiteLocky
transunvip.com
CHENGDU WEST DIMENSION DIGITAL T[...]50.117.113.222 (- United States)
2016-12-16 08:00Distribution SiteLocky
dadpledge.org
Realtime Register B.V. (n/a)
2016-12-16 08:00Distribution SiteLocky
taphaco.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]104.28.18.28 (- United States) +1 A record(s) 104.28.19.28 (AS13335, - United States)
2016-12-16 08:00Distribution SiteLocky
dating.instantlab.ru
REGRU-RU (n/a)
2016-12-16 08:00Distribution SiteLocky
paoket.com
SHANGHAI MEICHENG TECHNOLOGY INF[...]116.255.191.252 (- China)
2016-12-16 08:00Distribution SiteLocky
lamsangda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]45.117.81.133 (- Vietnam)
2016-12-16 08:00Distribution SiteLocky
vjumamel.com
DREAMHOST, LLC208.113.161.181 (- United States)
2016-12-16 07:59Distribution SiteLocky
www.urbani.com.au
NetRegistry118.127.47.171 (- Australia)
2016-12-16 07:59Distribution SiteLocky
ruifengweb.com
CHENGDU WEST DIMENSION DIGITAL T[...]211.149.156.196 (- China)
2016-12-16 07:59Distribution SiteLocky
www.auditcitoyen.be
Gandi Sas79.99.203.50 (- Belgium)
2016-12-16 07:59Distribution SiteLocky
www.manu-forti.co.uk
Paragon Internet Group Ltd t/a V[...]91.222.8.125 (- United Kingdom)
2016-12-16 07:59Distribution SiteLocky
fhflb.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.91.164.139 (- United States) +2 A record(s) 47.91.165.33 (AS4134, - United States)
47.91.165.67 (AS4134, - United States)
2016-12-16 07:59Distribution SiteLocky
sanae-sakamoto.ch
212.40.5.62 (- Switzerland)
2016-12-16 07:59Distribution SiteLocky
tcmission.org
eNom, Inc.198.185.159.144 (- United States)
2016-12-16 07:59Distribution SiteLocky
fm.zhibo.ba
203.195.177.131 (- China)
2016-12-16 07:59Distribution SiteLocky
www.rencontreparis.org
OVH91.134.167.248 (- France)
2016-12-16 07:59Distribution SiteLocky
jybedb.com
DROPCATCH.COM 881 LLC112.84.124.80 (- China)
2016-12-16 07:58Distribution SiteLocky
friendlygeek.org
eNom, Inc.185.176.40.99 (- Bulgaria)
2016-12-16 07:58Distribution SiteLocky
ws.osenilo.com
GODADDY.COM, LLC95.211.230.74 (- Netherlands)
2016-12-16 07:58Distribution SiteLocky
support.ichr.de
(n/a)
2016-12-16 07:58Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-12-16 07:58Distribution SiteLocky
test.markabuldum.com
FBS INC.217.79.184.48 (- Germany)
2016-12-16 07:58Distribution SiteLocky
cms-demo.is-it-on.at
195.34.220.6 (- Austria)
2016-12-16 07:58Distribution SiteLocky
kayleemoline.com
GODADDY.COM, LLC62.151.176.206 (- United States)
2016-12-16 07:58Distribution SiteLocky
demo.evgesha.ru
RU-CENTER-RU95.165.159.185 (- Russian Federation)
2016-12-16 07:58Distribution SiteLocky
seller.affordbuy.com
GODADDY.COM, LLC192.186.204.105 (- United States)
2016-12-16 07:58Distribution SiteLocky
ozzcleanenergy.com
GODADDY.COM, LLC198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-12-16 07:58Distribution SiteLocky
toastmedia.co.uk
LCN.com Ltd50.116.107.239 (- United States)
2016-12-16 07:58Distribution SiteLocky
monbega.info
Todaynic.com, Inc. (n/a)
2016-12-16 07:57Distribution SiteLocky
twilighttrailrun.com
ENOM, INC.98.124.252.140 (- United States)
2016-12-16 07:57Distribution SiteLocky
www.majorleaguesecurity.com
GODADDY.COM, LLC107.180.23.105 (- United States)
2016-12-16 07:57Distribution SiteLocky
mattdorman.com
TUCOWS DOMAINS INC.192.254.217.139 (- United States)
2016-12-16 07:57Distribution SiteLocky
2kindustri.se
Loopia AB (n/a)
2016-12-16 07:57Distribution SiteLocky
aquiestoy.org
GoDaddy.com, LLC50.30.34.57 (- United States)
2016-12-16 07:57Distribution SiteLocky
followmyleadatl.com
GODADDY.COM, LLC50.6.244.121 (- United States)
2016-12-16 07:57Distribution SiteLocky
kanibir.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-12-16 07:57Distribution SiteLocky
fotoserver4.cyper.at
144.76.45.55 (- Germany)
2016-12-16 07:57Distribution SiteLocky
www.draaksteken.nl
Computel Standby bv78.41.77.211 (- Netherlands)
2016-12-16 07:57Distribution SiteLocky
inoxcaocap.com.vn
210.86.239.25 (- Vietnam)
2016-12-16 07:57Distribution SiteLocky
www.redcitymedia.nl
AXC (n/a)
2016-12-16 07:57Distribution SiteLocky
xxxtina.ru
REGRU-RU (n/a)
2016-12-16 00:41Botnet C&CLocky
37.235.50.29
37.235.50.29 (- Switzerland)
2016-12-15 12:51Distribution SiteLocky
kanibir.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-12-15 12:51Distribution SiteLocky
rietdekker-brabant.nl
AXC104.27.130.253 (- United States) +1 A record(s) 104.27.131.253 (AS13335, - United States)
2016-12-15 12:51Distribution SiteLocky
mobile.beliar.ru
REGRU-RU141.8.193.7 (- Russian Federation)
2016-12-15 12:51Distribution SiteLocky
polywaste.co.zw
196.44.177.66 (- Zimbabwe)
2016-12-15 12:51Distribution SiteLocky
almamedical.es
31.193.142.205 (- United Kingdom)
2016-12-15 12:50Distribution SiteLocky
support.ichr.de
(n/a)
2016-12-15 12:50Distribution SiteLocky
monbega.info
Todaynic.com, Inc. (n/a)
2016-12-15 12:50Distribution SiteLocky
cms-demo.is-it-on.at
195.34.220.6 (- Austria)
2016-12-15 12:50Distribution SiteLocky
kitchencadd.net
ENOM, INC. (n/a)

# of rows displayed: 100
# of entries in database: 12'876

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >