Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-27 11:01Distribution SiteLocky
bridgeplacements.com
NETWORK SOLUTIONS, LLC.199.191.50.140 (- Virgin Islands)
2016-05-27 11:01Distribution SiteLocky
www.orchidealito.it
AEMCOM-REG81.88.224.155 (- Italy)
2016-05-27 11:01Distribution SiteLocky
birlesimsucuklari.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-05-27 11:01Distribution SiteLocky
acnek.com
GODADDY.COM, LLC184.168.131.241 (- United States)
2016-05-27 11:01Distribution SiteLocky
iwebmediasavvy.com
GODADDY.COM, LLC (n/a)
2016-05-27 11:01Distribution SiteLocky
greenwfms.com
FASTDOMAIN, INC. (n/a)
2016-05-27 11:01Distribution SiteLocky
www.ding-a-ling-tel.com
NETWORK SOLUTIONS, LLC.216.55.149.9 (- United States)
2016-05-27 11:01Distribution SiteLocky
projectodetalhe.pt
185.90.59.42 (- Portugal)
2016-05-27 10:28Distribution SiteLocky
ecpi.ro
Romarg SRL89.42.223.64 (- Romania)
2016-05-27 05:41Distribution SiteLocky
takibutaki.com
AEROTEK BILISIM SANAYI VE TICARE[...] (n/a)
2016-05-26 18:25Botnet C&CLocky
212.109.219.31
212.109.219.31 (- Russian Federation)
2016-05-26 07:59Botnet C&CLocky
104.131.182.103
104.131.182.103 (- United States)
2016-05-26 07:40Botnet C&CLocky
164.132.40.47
164.132.40.47 (- France)
2016-05-26 06:21Distribution SiteLocky
cdgame.kgb.pl
Consulting Service Sp. z o.o.195.114.0.64 (- Poland)
2016-05-26 06:21Distribution SiteLocky
birlesimsucuklari.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-05-26 06:21Distribution SiteLocky
equalityindonesia.com
CV. JOGJACAMP202.52.147.113 (- Indonesia)
2016-05-26 06:21Distribution SiteLocky
selonija.lv
104.198.14.52 (- United States)
2016-05-26 06:21Distribution SiteLocky
iwebmediasavvy.com
GODADDY.COM, LLC (n/a)
2016-05-26 06:21Distribution SiteLocky
hate-metal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.9.13.83 (- Germany)
2016-05-26 06:21Distribution SiteLocky
colleenthestylist.com
GODADDY.COM, LLC50.63.202.23 (- United States)
2016-05-26 06:21Distribution SiteLocky
www.broxlab.com
TLD REGISTRAR SOLUTIONS LTD104.28.16.156 (- United States) +1 A record(s) 104.28.17.156 (AS13335, - United States)
2016-05-26 06:21Distribution SiteLocky
apelecomp.com
REALTIME REGISTER BV188.165.44.36 (- France)
2016-05-26 06:20Distribution SiteLocky
humanoit.hu
195.56.148.160 (- Hungary)
2016-05-26 06:20Distribution SiteLocky
majaz.co.uk
Easy Internet Solutions Ltd (n/a)
2016-05-26 06:20Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-05-26 06:20Distribution SiteLocky
edupei.com.mx
Hospedando.Com.Mx (n/a)
2016-05-26 06:20Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-26 06:20Distribution SiteLocky
tspipp.tsu.tula.ru
REGRU-RU85.142.133.41 (- Russian Federation)
2016-05-26 06:20Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-25 18:30Botnet C&CLocky
188.166.168.250
188.166.168.250 (- United Kingdom)
2016-05-25 17:49Botnet C&CLocky
138.201.93.46
138.201.93.46 (- Germany)
2016-05-25 14:38Payment SiteTorrentLocker
de2nuvwegoo32oqv.torworks.li
(n/a)
2016-05-25 14:01Distribution SiteLocky
selonija.lv
104.198.14.52 (- United States)
2016-05-25 14:01Distribution SiteLocky
smp.com.mx
Hospedando.Com.Mx67.227.237.237 (- United States)
2016-05-25 14:00Distribution SiteLocky
comecomunicare.eu
Aruba S.p.A.62.149.128.151 (- Italy) +7 A record(s) 62.149.128.154 (AS31034, - Italy)
62.149.128.157 (AS31034, - Italy)
62.149.128.160 (AS31034, - Italy)
62.149.128.163 (AS31034, - Italy)
62.149.128.166 (AS31034, - Italy)
62.149.128.72 (AS31034, - Italy)
62.149.128.74 (AS31034, - Italy)
2016-05-25 14:00Distribution SiteLocky
orobos.nyc
GoDaddy.com, Inc.23.236.62.147 (- United States)
2016-05-25 14:00Distribution SiteLocky
lifeclinics.net
GODADDY.COM, LLC213.158.187.41 (- Egypt)
2016-05-25 14:00Distribution SiteLocky
www.appoutpost.com
GODADDY.COM, LLC132.148.241.87 (- United States)
2016-05-25 14:00Distribution SiteLocky
bizconsulting.ro
ICI - ROTLD86.35.15.215 (- Romania)
2016-05-25 14:00Distribution SiteLocky
tspipp.tsu.tula.ru
REGRU-RU85.142.133.41 (- Russian Federation)
2016-05-25 14:00Distribution SiteLocky
cjglobal.co
GODADDY.COM, INC.192.186.192.134 (- United States)
2016-05-25 14:00Distribution SiteLocky
digitacaoveloz.com.br
(n/a)
2016-05-25 14:00Distribution SiteLocky
bankruptcymag.com
MONIKER ONLINE SERVICES LLC204.11.56.37 (- Virgin Islands)
2016-05-25 14:00Distribution SiteLocky
globalcredithub.com
LAUNCHPAD.COM, INC.107.180.27.233 (- United States)
2016-05-25 14:00Distribution SiteLocky
crimeshurt.com
GODADDY.COM, LLC184.168.131.241 (- United States)
2016-05-25 14:00Distribution SiteLocky
unijovem.com.br
191.252.4.25 (- Brazil)
2016-05-25 14:00Distribution SiteLocky
brunohenrique.net
ENOM, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
avayeparseh.com
ONLINENIC, INC. (n/a)
2016-05-25 12:01Distribution SiteLocky
osdc.eu
GANDI185.189.40.55 (- United Kingdom)
2016-05-25 12:01Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC51.15.144.74 (- France)
2016-05-25 12:01Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV (n/a)
2016-05-25 12:01Distribution SiteLocky
wisebuy.com
GODADDY.COM, LLC97.74.85.102 (- United States)
2016-05-25 12:01Distribution SiteLocky
amazoo.com.br
104.27.186.128 (- United States) +1 A record(s) 104.27.187.128 (AS13335, - United States)
2016-05-25 12:01Distribution SiteLocky
jett.com
GODADDY.COM, LLC184.168.178.1 (- United States)
2016-05-25 12:01Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
onestopcableshop.com
SAFENAMES LTD23.20.239.12 (- United States)
2016-05-25 12:00Distribution SiteLocky
buzzimports.com.au
Web Address Registration184.164.156.210 (- United States)
2016-05-25 12:00Distribution SiteLocky
alintagranito.com
GODADDY.COM, LLC51.15.144.74 (- France)
2016-05-25 12:00Distribution SiteLocky
osdc.eu
GANDI185.189.40.55 (- United Kingdom)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD208.91.197.46 (- Virgin Islands)
2016-05-25 12:00Distribution SiteLocky
alborzcrane.com
REALTIME REGISTER BV (n/a)
2016-05-25 12:00Distribution SiteLocky
kitchen38.com
SAFENAMES LTD208.91.197.46 (- Virgin Islands)
2016-05-25 10:44Distribution SiteLocky
rsxxx.com
DNC HOLDINGS, INC.74.117.221.144 (- Cayman Islands)
2016-05-25 10:44Distribution SiteLocky
domyzbali-roztocze.pl
Consulting Service Sp. z o.o. (n/a)
2016-05-25 09:04Botnet C&CDMALocker
5.8.63.54
5.8.63.54 (- United States)
2016-05-25 08:48Distribution SiteLocky
baltela.lt
UAB "Interneto vizija"194.135.87.233 (- Lithuania)
2016-05-25 08:47Distribution SiteLocky
ontheblocks.com
ENOM, INC.23.20.239.12 (- United States)
2016-05-25 08:47Distribution SiteLocky
wikisecru.402.com1.ru
AGAVA-RU80.78.250.8 (- Russian Federation)
2016-05-25 08:47Distribution SiteLocky
yespos.co.uk
123-Reg Limited t/a 123-reg45.63.100.238 (- United Kingdom)
2016-05-25 08:47Distribution SiteLocky
angads.com.au
NetRegistry13.54.72.43 (- Australia)
2016-05-25 08:46Distribution SiteLocky
jerseyoffers.co.uk
Fasthosts Internet Ltd (n/a)
2016-05-25 02:57Botnet C&CDMALocker
95.213.192.77
95.213.192.77 (- Russian Federation)
2016-05-24 14:53Botnet C&CLocky
31.41.44.45
31.41.44.45 (- Russian Federation)
2016-05-24 10:47Distribution SiteLocky
protei.me
FastDomain Inc.192.124.249.159 (- United States)
2016-05-24 10:47Distribution SiteLocky
serwer1650017.home.pl
home.pl S.A. (n/a)
2016-05-24 10:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 09:17Botnet C&CCryptoWall
bucksmedia.go2cloud.org
eNom, Inc.52.208.119.205 (- Ireland)
2016-05-24 06:46Distribution SiteLocky
aslfinance.eu
EXO TECHNOLOGIES spol. s r.o.92.240.253.72 (- Slovakia)
2016-05-24 06:08Distribution SiteLocky
follyfoot.org
eNom, Inc.185.119.175.82 (- United Kingdom)
2016-05-24 06:03Distribution SiteLocky
mandoka.com
KEY-SYSTEMS GMBH176.9.172.190 (- Germany)
2016-05-24 06:03Distribution SiteLocky
freeflyers.com.au
VentraIP Wholesale139.162.29.31 (- Singapore)
2016-05-24 05:23Distribution SiteLocky
shop.camacartigrafiche.com
ENOM, INC.185.81.1.19 (- Italy)
2016-05-23 17:22Distribution SiteLocky
fina-mente.com
UNITED-DOMAINS AG (n/a)
2016-05-23 17:02Botnet C&CLocky
92.63.87.53
92.63.87.53 (- Latvia)
2016-05-22 06:33Payment SiteTorrentLocker
stgg5jv6mqiibmax.torpice.li
(n/a)
2016-05-21 16:39Botnet C&CLocky
dtojlhpasjk.pw
Namecheap95.211.174.92 (- Netherlands)
2016-05-21 15:19Botnet C&CLocky
ytcijiooxdtlbevrh.info
Dynadot, LLC69.195.129.70 (- United States)
2016-05-21 14:16Distribution SiteLocky
serienplaner.com
KEY-SYSTEMS GMBH78.46.104.205 (- Germany)
2016-05-21 14:16Distribution SiteLocky
climairuk.com
LCN.COM LTD.85.118.233.162 (- United Kingdom)
2016-05-21 14:16Distribution SiteLocky
onlyher.nazwa.pl
nazwa.pl sp. z o.o.85.128.128.104 (- Poland)
2016-05-21 14:16Distribution SiteLocky
adestudio.w8w.pl
Consulting Service Sp. z o.o. (n/a)
2016-05-21 14:16Distribution SiteLocky
cg.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
im-journal.com
TUCOWS DOMAINS INC. (n/a)
2016-05-21 14:16Distribution SiteLocky
cm.wandashops.com
GODADDY.COM, LLC85.25.235.209 (- Germany)
2016-05-21 14:16Distribution SiteLocky
bailamecuba.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-21 14:16Distribution SiteLocky
btkdevelopment.ru
RU-CENTER-RU81.177.139.242 (- Russian Federation)
2016-05-21 14:16Distribution SiteLocky
aviainburo.com
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-05-21 14:16Distribution SiteLocky
btcgroup.lgg.ru
R01-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
forrestsignsonline.com
GODADDY.COM, LLC192.124.249.10 (- United States)
2016-05-21 14:15Distribution SiteLocky
beautifulhosting.com.au
Web Address Registration (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >