Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-12-15 18:42Botnet C&CLocky
31.202.130.9
31.202.130.9 (- Ukraine)
2017-12-15 09:34Distribution SiteGlobeImposter
peopleiknow.org
Domain.com, LLC67.210.102.240 (- United States)
2017-12-15 09:34Distribution SiteGlobeImposter
grindelwald.ferienimboden.com
United-Domains AG88.99.174.135 (- Germany)
2017-12-15 09:34Distribution SiteGlobeImposter
l-ardagnole.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
420ent.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
ericajoy.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
conxibit.com
Melbourne IT, Ltd. d/b/a Interne[...]204.11.56.48 (- Virgin Islands)
2017-12-13 17:15Distribution SiteGlobeImposter
pesonamas.co.id
103.58.102.38 (- Indonesia)
2017-12-13 17:15Distribution SiteGlobeImposter
conxibit.com
Melbourne IT, Ltd. d/b/a Interne[...]204.11.56.48 (- Virgin Islands)
2017-12-13 17:15Distribution SiteGlobeImposter
itsmaterial.us
eNom, LLC98.124.252.176 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
ericajoy.com
eNom, Inc. (n/a)
2017-12-13 17:14Distribution SiteGlobeImposter
truhlarstvi-bezdeka.cz
REG-ZONER46.28.105.4 (- Czech Republic)
2017-12-13 17:14Distribution SiteGlobeImposter
depomedikal.com
GoDaddy.com, LLC82.151.131.234 (- Turkey)
2017-12-13 17:14Distribution SiteGlobeImposter
brendo.biz
eNom, LLC103.26.41.24 (- Singapore)
2017-12-13 17:14Distribution SiteGlobeImposter
gilgroup.com
Network Solutions, LLC.216.177.130.203 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
leicon.it
REGISTER-REG98.124.252.131 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
laveentrading.com
eNom, Inc. (n/a)
2017-12-13 17:14Distribution SiteGlobeImposter
hwayou.com.tw
WebCC Ltd.103.118.24.38 (- Taiwan (Province of China))
2017-12-13 16:47Distribution SiteGlobeImposter
basedow-bilder.de
194.116.187.130 (- Germany)
2017-12-13 16:47Distribution SiteGlobeImposter
motifahsap.com
PDR Ltd. d/b/a PublicDomainRegis[...]188.132.180.113 (- Turkey)
2017-12-13 16:47Distribution SiteGlobeImposter
bit-chasers.com
eNom, Inc. (n/a)
2017-12-13 16:47Distribution SiteGlobeImposter
itsmaterial.us
eNom, LLC98.124.252.176 (- United States)
2017-12-13 16:47Distribution SiteGlobeImposter
troyriser.com
eNom, Inc.98.124.251.167 (- United States)
2017-12-13 16:47Distribution SiteGlobeImposter
pragmaticinquiry.org
eNom, Inc. (n/a)
2017-12-11 11:03Botnet C&CLocky
stevnxwq.pw
Namecheap208.100.26.251 (- United States)
2017-12-05 15:28Botnet C&CLocky
rqfsctpgpuani.pw
Namecheap208.100.26.251 (- United States)
2017-12-05 01:54Botnet C&CLocky
ibjgnqsthdyp.pw
Namecheap208.100.26.251 (- United States)
2017-12-01 17:10Botnet C&CLocky
gnsquwmgukkpgpt.pw
Namecheap208.100.26.251 (- United States)
2017-12-01 03:21Botnet C&CLocky
lyrnvane.pw
Namecheap208.100.26.251 (- United States)
2017-11-30 20:48Botnet C&CLocky
qqtphtlhny.pw
Namecheap208.100.26.251 (- United States)
2017-11-30 20:48Botnet C&CLocky
188.127.230.60
188.127.230.60 (- Russian Federation)
2017-11-28 12:50Botnet C&CLocky
wqxvsxppjivs.pw
Namecheap208.100.26.251 (- United States)
2017-11-27 14:46Botnet C&CLocky
yaynawvtuqcarjwc.pw
Namecheap208.100.26.251 (- United States)
2017-11-10 08:32Distribution SiteLocky
primeassociatesinc.com
eNom, Inc.157.7.107.244 (- Japan)
2017-11-10 08:32Distribution SiteLocky
testbxc.u-host.ru
RU-CENTER-RU212.220.124.233 (- Russian Federation)
2017-11-10 08:32Distribution SiteLocky
336.linux1.testsider.dk
77.243.131.16 (- Denmark)
2017-11-10 08:32Distribution SiteLocky
vallei-elektrotechniek.nl
Kom Plot ! Hosting & Webdesign B[...]104.24.98.203 (- United States) +1 A record(s) 104.24.99.203 (AS13335, - United States)
2017-11-09 12:15Distribution SiteLocky
procuradores-elche.com
Cronon AG81.169.145.94 (- Germany)
2017-11-09 12:15Distribution SiteLocky
67.199.41.9
n/a
2017-11-09 12:15Distribution SiteLocky
phonecenter24.de
85.13.146.65 (- Germany)
2017-11-09 12:15Distribution SiteLocky
tci.seventhworld.com
Network Solutions, LLC. (n/a)
2017-11-09 12:15Distribution SiteLocky
purenergy.it
REGISTER-REG185.53.178.6 (- Germany)
2017-11-08 12:15Distribution SiteLocky
thennaloperdown.net
Eranet International Limited (n/a)
2017-11-08 12:15Distribution SiteLocky
fgmindia.com
PDR Ltd. d/b/a PublicDomainRegis[...]162.210.102.40 (- United States)
2017-11-08 12:15Distribution SiteLocky
gulercin.com
Tucows Domains Inc.46.20.146.37 (- Turkey)
2017-11-08 12:15Distribution SiteLocky
euriskosrl.it
REGISTER-REG185.2.4.136 (- Italy)
2017-11-08 12:15Distribution SiteLocky
feigel-fensterbau.eu
STRATO AG81.169.145.151 (- Germany)
2017-11-08 09:50Distribution SiteLocky
arcusautomatika.ba
195.222.33.183 (- Bosnia and Herzegovina)
2017-11-08 09:50Distribution SiteLocky
basarteks.com
eNom, Inc.46.235.10.34 (- Turkey)
2017-11-08 09:50Distribution SiteLocky
amcscomputer.com
eNom, Inc.216.242.171.101 (- United States)
2017-11-08 09:49Distribution SiteLocky
bobtheprinter.com
Network Solutions, LLC.37.60.235.115 (- United States)
2017-11-08 09:49Distribution SiteLocky
altarek.com
GoDaddy.com, LLC (n/a)
2017-11-07 11:58Distribution SiteLocky
336.linux1.testsider.dk
77.243.131.16 (- Denmark)
2017-11-07 11:58Distribution SiteLocky
muchinfaket.net
Eranet International Limited (n/a)
2017-11-07 11:58Distribution SiteLocky
christaminiatures.nl
Registrar.eu37.97.139.59 (- Netherlands)
2017-11-07 11:58Distribution SiteLocky
teesaddiction.com
Tucows Domains Inc.217.73.227.10 (- Italy)
2017-11-07 11:58Distribution SiteLocky
florastor.net
Internet Domain Service BS Corp147.135.3.98 (- United States)
2017-11-07 11:58Distribution SiteLocky
heinzig.info
PSI-USA, Inc. dba Domain Robot46.4.156.11 (- Germany)
2017-11-07 06:42Distribution SiteLocky
jimhalltreeservice.com
GoDaddy.com, LLC173.199.179.134 (- United States)
2017-11-07 06:42Distribution SiteLocky
hilaryandsavio.com
1&1 Internet SE72.249.127.194 (- United States)
2017-11-07 06:42Distribution SiteLocky
ist-profy.ru
R01-RU90.156.144.159 (- Russian Federation)
2017-11-07 06:42Distribution SiteLocky
lvps212-67-205-60.vps.webfusion.co.uk
123-Reg Limited t/a 123-reg212.67.205.60 (- United Kingdom)
2017-11-07 06:42Distribution SiteLocky
toftinrontonsfo.info
Eranet International Limited (n/a)
2017-11-07 06:42Distribution SiteLocky
nikom.be
Registrar.eu46.30.215.133 (- Denmark)
2017-11-07 06:42Distribution SiteLocky
michelsmarkt.de
94.130.89.61 (- Germany)
2017-11-07 06:42Distribution SiteLocky
l-up.net
JSC Registrar R0189.104.72.196 (- Russian Federation)
2017-11-06 22:50Botnet C&CLocky
82.202.221.88
82.202.221.88 (- Russian Federation)
2017-11-05 11:12Botnet C&CLocky
sqsigig.pw
Namecheap208.100.26.251 (- United States)
2017-11-05 11:12Botnet C&CLocky
ozfin.ru
REGTIME-RU31.184.196.78 (- Russian Federation)
2017-11-04 10:50Distribution SiteLocky
cibeservice.it
ARUBA-REG77.81.232.130 (- Italy)
2017-11-04 10:50Distribution SiteLocky
fsol.co.za
149.3.135.72 (- United Kingdom)
2017-11-04 10:50Distribution SiteLocky
euroregistro.net
PDR Ltd. d/b/a PublicDomainRegis[...]31.24.154.172 (- Spain)
2017-11-04 10:50Distribution SiteLocky
dangelofavata.com
Gandi SAS46.28.0.123 (- Italy)
2017-11-04 10:50Distribution SiteLocky
ceocfonewsline.com
eNom, Inc.98.124.251.69 (- United States)
2017-11-03 11:30Distribution SiteLocky
san-syo.co.jp
119.75.238.11 (- Japan)
2017-11-03 11:30Distribution SiteLocky
twonkygames.com
PSI-USA, Inc. dba Domain Robot85.25.242.138 (- Germany)
2017-11-03 11:30Distribution SiteLocky
pwmsteel.com
DomainPeople, Inc.216.251.43.11 (- United States)
2017-11-03 11:30Distribution SiteLocky
pabxconsultants.co.za
41.72.154.151 (- South Africa)
2017-11-03 11:30Distribution SiteLocky
saranville.com
OnlineNIC, Inc.27.254.148.14 (- Thailand)
2017-11-03 11:30Distribution SiteLocky
evengrollighromsof.net
Eranet International Limited (n/a)
2017-11-03 11:30Distribution SiteLocky
visualindesign.be
OVH5.135.178.149 (- France)
2017-11-02 19:55Distribution SiteLocky
ollyandfriends.de
85.119.155.42 (- Germany)
2017-11-02 19:55Distribution SiteLocky
verwadirephen.info
Eranet International Limited (n/a)
2017-11-02 19:55Distribution SiteLocky
remers-messebau.de
89.163.140.72 (- Germany)
2017-11-02 19:55Distribution SiteLocky
michelsmarkt.de
94.130.89.61 (- Germany)
2017-11-02 19:55Distribution SiteLocky
noya-en.eu
Registrar.eu185.107.213.135 (- Netherlands)
2017-11-02 19:55Distribution SiteLocky
ruemmelin.info
PSI-USA, Inc. dba Domain Robot81.90.33.38 (- Germany)
2017-11-02 19:54Distribution SiteLocky
primeassociatesinc.com
eNom, Inc.157.7.107.244 (- Japan)
2017-11-02 12:01Distribution SiteLocky
lvps212-67-205-60.vps.webfusion.co.uk
123-Reg Limited t/a 123-reg212.67.205.60 (- United Kingdom)
2017-11-02 12:01Distribution SiteLocky
minascriptandart.nl
Renaissance IT85.17.104.175 (- Netherlands)
2017-11-02 12:01Distribution SiteLocky
hilaryandsavio.com
1&1 Internet SE72.249.127.194 (- United States)
2017-11-02 12:01Distribution SiteLocky
ist-profy.ru
R01-RU90.156.144.159 (- Russian Federation)
2017-11-02 12:01Distribution SiteLocky
m.monteschiavo.com
EuroDNS S.A195.96.193.23 (- Italy)
2017-11-02 12:01Distribution SiteLocky
matternomatter.com
Tucows Domains Inc.149.3.135.72 (- United Kingdom)
2017-11-01 10:50Distribution SiteLocky
claridge-holdings.com
Web Commerce Communications Limi[...]199.59.242.150 (- United States)
2017-11-01 10:50Distribution SiteLocky
envi-herzog.de
194.116.187.130 (- Germany)
2017-11-01 10:49Distribution SiteLocky
transmercasa.com
GoDaddy.com, LLC62.210.167.169 (- France)
2017-11-01 10:49Distribution SiteLocky
aurea-art.ru
RU-CENTER-RU (n/a)
2017-11-01 10:49Distribution SiteLocky
dotecnia.cl
72.249.104.96 (- United States)
2017-11-01 10:49Distribution SiteLocky
celebrityonline.cz
REG-INTERNET-CZ (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >