Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-21 14:15Distribution SiteLocky
modaxxl.ro
ICI - ROTLD (n/a)
2016-05-21 14:15Distribution SiteLocky
www.minkssalon.com
WILD WEST DOMAINS, LLC204.11.56.48 (- Virgin Islands)
2016-05-21 14:15Distribution SiteLocky
margohack.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-21 14:15Distribution SiteLocky
btc4kids.ru
RU-CENTER-RU79.174.64.211 (- Russian Federation)
2016-05-21 14:15Distribution SiteLocky
www.imagewarp.com
ONLINENIC, INC.169.62.176.226 (- United States)
2016-05-21 14:15Distribution SiteLocky
aquapeel.ru
RU-CENTER-RU (n/a)
2016-05-21 14:15Distribution SiteLocky
allergymachine.com
DREAMHOST, LLC (n/a)
2016-05-21 14:15Distribution SiteLocky
justicemandate.org
GoDaddy.com, LLC110.232.140.133 (- Australia)
2016-05-21 14:05Distribution SiteLocky
dubaifridays.com
GODADDY.COM, LLC188.165.66.81 (- Finland)
2016-05-21 14:04Distribution SiteLocky
blog.rotapost.ru
RU-CENTER-RU162.221.224.91 (- United States)
2016-05-21 13:24Botnet C&CLocky
149.154.159.179
149.154.159.179 (- Germany)
2016-05-21 13:24Botnet C&CLocky
95.46.114.80
95.46.114.80 (- Russian Federation)
2016-05-21 13:02Botnet C&CLocky
37.235.53.210
37.235.53.210 (- Spain)
2016-05-21 13:01Distribution SiteLocky
atlantaelectronics.co.id
192.198.85.222 (- United States)
2016-05-21 12:57Distribution SiteLocky
drunkenboyz.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-21 12:36Distribution SiteLocky
oftal.nichost.ru
RU-CENTER-RU (n/a)
2016-05-21 12:36Distribution SiteLocky
dreamfleet.ru
RU-CENTER-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
iflowershop.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
kraskileto.ru
REGRU-RU45.33.60.216 (- United States)
2016-05-21 12:35Distribution SiteLocky
enexp.ru
R01-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
brokenheadaviaries.com.au
PlanetDomain104.18.52.145 (- United States) +1 A record(s) 104.18.53.145 (AS13335, - United States)
2016-05-21 12:35Distribution SiteLocky
blackdildo.net
ENOM, INC. (n/a)
2016-05-21 12:35Distribution SiteLocky
belautolux.ru
RU-CENTER-RU (n/a)
2016-05-21 12:35Distribution SiteLocky
bk01.ru
RU-CENTER-RU92.53.126.118 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
capitolcollectibles.com
GODADDY.COM, LLC198.71.248.67 (- United States)
2016-05-21 12:34Distribution SiteLocky
a1.bbk.name
REGISTRAR OF DOMAIN NAMES REG.RU[...] (n/a)
2016-05-21 12:34Distribution SiteLocky
president-school-online.ru
R01-RU (n/a)
2016-05-21 12:34Distribution SiteLocky
ecocoolers.ru
REGISTRATOR-RU (n/a)
2016-05-21 12:34Distribution SiteLocky
btservis.ru
RU-CENTER-RU195.47.196.202 (- Russian Federation)
2016-05-21 12:34Distribution SiteLocky
forlifepatios.com.au
Web Address Registration43.241.54.247 (- Australia)
2016-05-21 12:33Distribution SiteLocky
tvs24m.ru
REGISTRATOR-RU (n/a)
2016-05-20 18:32Botnet C&CLocky
acbstypdrijslr.ru
NAUNET-RU31.41.44.21 (- Russian Federation)
2016-05-20 15:40Distribution SiteLocky
bundooraaccounting.com
SYNERGY WHOLESALE PTY LTD (n/a)
2016-05-20 15:40Distribution SiteLocky
bobbysinghwpg.com
GODADDY.COM, LLC192.186.246.98 (- United States)
2016-05-20 15:39Distribution SiteLocky
currimbhoys.com
NETWORK SOLUTIONS, LLC.104.27.154.207 (- United States) +1 A record(s) 104.27.155.207 (AS13335, - United States)
2016-05-20 15:39Distribution SiteLocky
bilgoray.com
GODADDY.COM, LLC216.120.252.191 (- United States)
2016-05-20 15:39Distribution SiteLocky
www.flamingo-shop.eu
Vautron Rechenzentrum AG37.228.159.117 (- Germany)
2016-05-20 15:39Distribution SiteLocky
emilychoy.com
LAUNCHPAD.COM, INC.50.87.147.144 (- United States)
2016-05-20 15:38Distribution SiteLocky
cameramartusa.info
GoDaddy.com, LLC (n/a)
2016-05-20 15:38Distribution SiteLocky
ayahstar.net.au
Synergy Wholesale Pty Ltd (n/a)
2016-05-20 15:38Distribution SiteLocky
euro-support.be
Combell nv176.62.167.160 (- Belgium)
2016-05-20 14:29Distribution SiteTorrentLocker
gettingmarried.ie
(n/a)
2016-05-20 14:29Distribution SiteTorrentLocker
linguistlounge.org
eNom, Inc.178.62.86.120 (- United Kingdom)
2016-05-20 12:02Botnet C&CLocky
178.63.238.185
178.63.238.185 (- Germany)
2016-05-20 11:19Distribution SiteLocky
immoclic.o2switch.net
ONLINE SAS (n/a)
2016-05-20 11:03Distribution SiteLocky
privatfunkagentur.taunus-media-online.de
217.175.246.77 (- Germany)
2016-05-20 11:03Distribution SiteLocky
cartomak.de
94.130.164.156 (- Germany)
2016-05-20 11:03Distribution SiteLocky
staffsolut.nichost.ru
RU-CENTER-RU195.208.1.102 (- Russian Federation)
2016-05-20 11:03Distribution SiteLocky
badaxx.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-20 11:03Distribution SiteLocky
mojeweselicho.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-20 11:03Distribution SiteLocky
posciele.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-20 11:03Distribution SiteLocky
tzr.grejt.pl
Consulting Service Sp. z o.o.192.165.54.225 (- United Kingdom)
2016-05-20 11:03Distribution SiteLocky
imetinyang.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-20 11:03Distribution SiteLocky
toplista.xonx.pl
Consulting Service Sp. z o.o.212.91.7.33 (- Poland)
2016-05-20 11:02Distribution SiteLocky
perspektywa2012.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-20 10:26Distribution SiteLocky
dugoutdad.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-05-20 10:26Distribution SiteLocky
babamal.com
GODADDY.COM, LLC (n/a)
2016-05-20 10:26Distribution SiteLocky
forshawssalads.co.uk
123-Reg Limited t/a 123-reg85.118.233.162 (- United Kingdom)
2016-05-20 10:26Distribution SiteLocky
craftbeerventures.nl
E-nom Inc79.170.89.196 (- Netherlands)
2016-05-20 10:26Distribution SiteLocky
dev.hartis.org
Name.com, LLC209.182.198.152 (- United States)
2016-05-20 10:05Botnet C&CLocky
138.201.118.102
138.201.118.102 (- Germany)
2016-05-20 09:49Botnet C&CLocky
51.254.240.89
51.254.240.89 (- France)
2016-05-20 08:44Botnet C&CLocky
91.219.29.106
91.219.29.106 (- Ukraine)
2016-05-20 07:38Botnet C&CLocky
bkdjvmmkwgkvgw.su
NAUNET-REG-FID91.219.31.14 (- Russian Federation)
2016-05-20 05:25Distribution SiteLocky
bpspl.co.in
Webiq Domains Solutions Pvt. Ltd[...]166.62.28.98 (- United States)
2016-05-19 21:09Botnet C&CLocky
hppfsslyeyseudg.biz
BIZCN.COM, INC.51.254.240.89 (- France)
2016-05-19 17:18Distribution SiteLocky
www.barsracing.com
ENOM, INC.207.45.183.70 (- United States)
2016-05-19 15:03Distribution SiteLocky
kamiltyrcha.aq.pl
Consulting Service Sp. z o.o. (n/a)
2016-05-19 14:00Distribution SiteLocky
usterkiwloclawek.za.pl
Consulting Service Sp. z o.o.86.111.242.129 (- Poland)
2016-05-19 12:53Distribution SiteLocky
kemper-inter.net
UNITED-DOMAINS AG109.237.133.204 (- Germany)
2016-05-19 10:01Botnet C&CLocky
92.63.87.48
92.63.87.48 (- Latvia)
2016-05-19 09:16Botnet C&CLocky
193.9.28.16
193.9.28.16 (- United States)
2016-05-19 08:16Distribution SiteLocky
genius-versand.de
85.13.140.200 (- Germany)
2016-05-19 08:16Distribution SiteLocky
oavb.com
TUCOWS DOMAINS INC.23.236.62.147 (- United States)
2016-05-19 08:16Distribution SiteLocky
themathwebsite.com
TUCOWS DOMAINS INC.168.144.248.40 (- Canada)
2016-05-19 08:16Distribution SiteLocky
www.barth-sanitaer.de
81.169.145.165 (- Germany)
2016-05-19 08:16Distribution SiteLocky
gc-hubbelrath.server1.hostingforyou.de
(n/a)
2016-05-19 08:15Distribution SiteLocky
vantagenetsvc.com
GODADDY.COM, LLC43.255.154.124 (- Singapore)
2016-05-19 08:15Distribution SiteLocky
teplar.ru
REGTIME-RU127.0.0.1 (n/a)
2016-05-19 08:05Botnet C&CLocky
109.234.35.123
109.234.35.123 (- Russian Federation)
2016-05-19 07:52Distribution SiteLocky
drevstan.ru
REGRU-RU (n/a)
2016-05-19 07:40Distribution SiteLocky
www.briarhurst.org
Tucows Inc.64.98.145.30 (- Canada)
2016-05-19 07:03Distribution SiteLocky
itc.slav.dn.ua
193.228.2.3 (- Ukraine)
2016-05-19 06:49Distribution SiteLocky
clubrotor.ru
RU-CENTER-RU90.156.201.101 (- Russian Federation) +3 A record(s) 90.156.201.108 (AS5537, - Russian Federation)
90.156.201.113 (AS25532, - Russian Federation)
90.156.201.37 (AS25532, - Russian Federation)
2016-05-18 09:36Payment SiteTorrentLocker
de2nuvwegoo32oqv.torspaces.li
(n/a)
2016-05-18 08:28Distribution SiteLocky
racedayworld.com
NETWORK SOLUTIONS, LLC.52.71.37.165 (- United States)
2016-05-18 07:37Payment SiteTorrentLocker
de2nuvwegoo32oqv.torbook.li
(n/a)
2016-05-18 07:04Distribution SiteLocky
enormail.eu
Registrar.eu109.237.220.51 (- Netherlands)
2016-05-18 06:55Botnet C&CLocky
78.47.159.97
78.47.159.97 (- Germany)
2016-05-18 06:52Distribution SiteLocky
boonstoppel.info
Hosting Concepts B.V. dba Openpr[...]128.140.219.133 (- Netherlands)
2016-05-18 06:21Distribution SiteLocky
79.96.153.93
(n/a)
2016-05-18 06:07Distribution SiteLocky
depaardestal.nl
One.com A/S46.30.213.69 (- Denmark)
2016-05-18 05:27Distribution SiteLocky
allmp3.hostil.pl
OVH SAS87.98.236.134 (- Poland)
2016-05-18 05:10Distribution SiteLocky
drive-mir.ru
RU-CENTER-RU85.93.145.137 (- Russian Federation)
2016-05-17 20:13Botnet C&CLocky
93.170.169.52
93.170.169.52 (- Czech Republic)
2016-05-17 14:17Botnet C&CLocky
217.12.199.151
217.12.199.151 (- Ukraine)
2016-05-17 14:02Distribution SiteLocky
katyco.net
NAME.COM, INC. (n/a)
2016-05-17 13:10Distribution SiteLocky
fuji-mig.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]93.190.41.97 (- Ukraine)
2016-05-17 12:57Distribution SiteLocky
abantuvisions.com
ENOM, INC.192.185.90.154 (- United States)
2016-05-17 12:45Distribution SiteLocky
clerici.info
Ascio Technologies, Inc. Danmark[...]213.205.38.24 (- Italy)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >