Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-05-17 12:40Distribution SiteLocky
pocketfullofpoems.com
GO CHINA DOMAINS, LLC198.57.247.142 (- United States)
2016-05-17 12:38Distribution SiteLocky
apotekroxy.com
TUCOWS DOMAINS INC.103.229.72.22 (- Indonesia)
2016-05-17 08:18Distribution SiteLocky
jasoncoroy.com
ENOM, INC.46.17.4.50 (- Netherlands)
2016-05-17 07:24Distribution SiteLocky
kabif.org.uk
Promo People, Inc. (n/a)
2016-05-17 07:23Distribution SiteLocky
fundacionbraun.com
NETWORK SOLUTIONS, LLC.200.63.97.220 (- Chile)
2016-05-17 07:21Distribution SiteLocky
sevvalsenturk.com
ENOM, INC. (n/a)
2016-05-17 07:21Distribution SiteLocky
uwzorg.info
Key-Systems GmbH89.105.197.30 (- Netherlands)
2016-05-17 06:09Distribution SiteLocky
simplesourcehr.com
GODADDY.COM, LLC (n/a)
2016-05-17 06:09Distribution SiteLocky
sexlandia.ru
REGRU-RU91.218.229.10 (- Russian Federation)
2016-05-17 06:09Distribution SiteLocky
no-id.eu
CSL GmbH Computer Service Langen[...]83.137.194.81 (- Netherlands)
2016-05-17 06:09Distribution SiteLocky
pasadenaoffice.com
REGISTER.COM, INC. (n/a)
2016-05-17 06:06Distribution SiteLocky
www.wellsigns.com
NETWORK SOLUTIONS, LLC.195.8.66.1 (- United Kingdom)
2016-05-17 05:36Distribution SiteLocky
zarya-ua.com.ua
ua.ukraine185.68.16.203 (- Ukraine)
2016-05-17 00:33Botnet C&CLocky
dqtfhkgskushlum.org
Dynadot, LLC69.195.129.70 (- United States)
2016-05-17 00:23Botnet C&CLocky
31.184.197.72
31.184.197.72 (- Russian Federation)
2016-05-17 00:23Botnet C&CLocky
188.127.231.124
188.127.231.124 (- Russian Federation)
2016-05-17 00:23Botnet C&CLocky
176.53.21.105
176.53.21.105 (- Turkey)
2016-05-17 00:23Botnet C&CLocky
149.202.109.202
149.202.109.202 (- France)
2016-05-16 14:31Distribution SiteLocky
12hourenergy.com.au
Web Address Registration (n/a)
2016-05-16 14:30Distribution SiteLocky
nacirembalagens.com.br
177.185.196.155 (- Brazil)
2016-05-16 14:30Distribution SiteLocky
foundationapparelco.com
GODADDY.COM, LLC (n/a)
2016-05-16 14:30Distribution SiteLocky
alynshy.com
GODADDY.COM, LLC (n/a)
2016-05-16 14:30Distribution SiteLocky
athleticmmagear.com
REGISTER.COM, INC.50.87.145.77 (- United States)
2016-05-16 14:29Distribution SiteLocky
philippinesregalo.com
NAMESILO, LLC (n/a)
2016-05-16 14:28Distribution SiteLocky
renklitatlar.com
TUCOWS DOMAINS INC. (n/a)
2016-05-16 14:27Distribution SiteLocky
myeventincentives.com
FASTDOMAIN, INC.74.220.199.6 (- United States)
2016-05-16 14:27Distribution SiteLocky
truesafetygear.ca
Go Daddy Domains Canada, Inc23.227.38.32 (- Canada)
2016-05-16 14:27Distribution SiteLocky
medihometown-usa.com
GODADDY.COM, LLC (n/a)
2016-05-16 14:26Distribution SiteLocky
mintbymelm.com
GODADDY.COM, LLC103.11.191.51 (- Singapore)
2016-05-16 14:26Distribution SiteLocky
soldabarra.com.br
159.203.75.88 (- United States)
2016-05-16 14:26Distribution SiteLocky
uggforever.com.au
Web Address Registration (n/a)
2016-05-16 14:14Distribution SiteLocky
visionpharmapk.com
GODADDY.COM, LLC203.124.44.33 (- Pakistan)
2016-05-16 14:14Distribution SiteLocky
tafeta.ca
SIBERNAME INTERNET AND SOFTWARE [...]209.44.101.146 (- Canada)
2016-05-16 14:14Distribution SiteLocky
sunlite.com.au
TPP Wholesale Pty Ltd54.252.105.221 (- Australia)
2016-05-16 14:13Distribution SiteLocky
scpremiumbikes.com
TUCOWS DOMAINS INC.103.6.198.237 (- Malaysia)
2016-05-16 14:13Distribution SiteLocky
optimus-communication.com
GODADDY.COM, LLC202.52.146.75 (- Indonesia)
2016-05-16 14:13Distribution SiteLocky
neophrontech.com
GODADDY.COM, LLC45.113.122.172 (- India)
2016-05-16 14:13Distribution SiteLocky
muscleinjuries.com
NAMESECURE.COM204.145.69.195 (- United States)
2016-05-16 14:12Distribution SiteLocky
lhhme.com.sg
IP MIRROR PTE LTD103.9.101.111 (- Singapore)
2016-05-16 14:12Distribution SiteLocky
deanstum.com
GODADDY.COM, LLC23.89.15.97 (- United States)
2016-05-16 14:11Distribution SiteLocky
aquatixbottle.com
GODADDY.COM, LLC184.168.221.47 (- United States)
2016-05-16 14:11Distribution SiteLocky
albany.asn.au
Web Address Registration202.59.111.126 (- Australia)
2016-05-16 14:10Distribution SiteLocky
sitkainvestigations.com
GODADDY.COM, LLC50.63.202.47 (- United States)
2016-05-16 12:56Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC46.166.182.110 (- Netherlands)
2016-05-16 12:56Distribution SiteLocky
thetestserver.net
ENOM, INC.192.185.102.2 (- United States)
2016-05-16 12:55Distribution SiteLocky
fundaciontehuelche.com.ar
200.58.111.224 (- Argentina)
2016-05-16 10:49Distribution SiteLocky
sweetkad.com
GODADDY.COM, LLC66.45.245.40 (- United States)
2016-05-16 09:07Botnet C&CLocky
5.34.183.40
5.34.183.40 (- Ukraine)
2016-05-10 14:25Botnet C&CLocky
92.222.71.26
92.222.71.26 (- France)
2016-05-10 11:00Distribution SiteLocky
wein-shop.wineandnature.com
1&1 INTERNET SE (n/a)
2016-05-10 11:00Distribution SiteLocky
synchrostore.com.br
52.67.140.107 (- Brazil)
2016-05-10 11:00Distribution SiteLocky
smoochintimates.com.au
Tucows116.90.56.148 (- Australia)
2016-05-10 11:00Distribution SiteLocky
shop.singledivers.com
GODADDY.COM, LLC (n/a)
2016-05-10 11:00Distribution SiteLocky
shop.kvgems-preciousstones.com
GODADDY.COM, LLC173.245.95.98 (- United States)
2016-05-10 10:59Distribution SiteLocky
shop.kndbooks.com
GODADDY.COM, LLC (n/a)
2016-05-10 10:59Distribution SiteLocky
shop.futurefactory-software.com
LEDL.NET GMBH78.46.59.214 (- Germany)
2016-05-10 10:59Distribution SiteLocky
recomobilesolutions.com
ENOM, INC. (n/a)
2016-05-10 10:58Distribution SiteLocky
rhythmlifestyle.co.uk
Paragon Internet Group Ltd t/a T[...] (n/a)
2016-05-10 10:58Distribution SiteLocky
premierbandsusa.com
GODADDY.COM, LLC104.207.226.121 (- United States)
2016-05-10 10:58Distribution SiteLocky
nowandthensecondhandstore.com
GODADDY.COM, LLC50.63.202.62 (- United States)
2016-05-10 10:58Distribution SiteLocky
natural-skin.com.au
Web Address Registration (n/a)
2016-05-10 10:57Distribution SiteLocky
marinastore.co.uk
UK2 Limited23.99.181.251 (- United States)
2016-05-10 10:57Distribution SiteLocky
lapkodeal.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-05-10 10:57Distribution SiteLocky
justhorseriders.co.uk
1 & 1 Internet SE185.162.224.150 (- United Kingdom)
2016-05-10 10:56Distribution SiteLocky
iloveaceite.com
NETEARTH ONE INC. D/B/A NETEARTH31.47.74.38 (- Spain)
2016-05-10 10:56Distribution SiteLocky
harshdeepjewellers.com
GODADDY.COM, LLC103.50.162.127 (- India)
2016-05-10 10:56Distribution SiteLocky
goblinada.net
TUCOWS DOMAINS INC.194.135.87.127 (- Lithuania)
2016-05-10 10:55Distribution SiteLocky
etikdeals.com
ONLINE SAS (n/a)
2016-05-10 10:55Distribution SiteLocky
drgravity.com
NETWORK SOLUTIONS, LLC.205.178.189.131 (- United States)
2016-05-10 10:55Distribution SiteLocky
divyabooks.com
NET 4 INDIA LIMITED107.154.159.115 (- United States) +1 A record(s) 107.154.173.115 (AS19551, - United States)
2016-05-10 10:55Distribution SiteLocky
cubee.lt
UAB "Interneto vizija"194.135.87.127 (- Lithuania)
2016-05-10 10:54Distribution SiteLocky
cmobilier.com
OVH5.39.70.7 (- France)
2016-05-10 10:54Distribution SiteLocky
beverlyhillssilver.com
NETWORK SOLUTIONS, LLC.35.227.210.197 (- United States)
2016-05-10 10:54Distribution SiteLocky
admin.prettysecrets.com
GO FRANCE DOMAINS, LLC (n/a)
2016-05-10 10:42Distribution SiteLocky
tadinda.web-tasarimcilar.com
GODADDY.COM, LLC (n/a)
2016-05-09 06:33Payment SiteTorrentLocker
de2nuvwegoo32oqv.tortelevision.li
(n/a)
2016-05-09 02:36Botnet C&CLocky
37.46.131.153
37.46.131.153 (- Russian Federation)
2016-05-08 21:29Botnet C&CTeslaCrypt
jdebrains.com
GODADDY.COM, LLC23.229.155.72 (- United States)
2016-05-08 21:29Botnet C&CTeslaCrypt
chaliawala.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]64.22.112.34 (- United States)
2016-05-08 07:20Botnet C&CLocky
193.124.185.87
193.124.185.87 (- Russian Federation)
2016-05-07 22:45Botnet C&CLocky
146.185.137.40
146.185.137.40 (- Netherlands)
2016-05-07 06:29Distribution SiteLocky
helpdesk.zergos.ru
REGRU-RU138.201.119.127 (- Germany)
2016-05-06 20:30Botnet C&CTeslaCrypt
www.laidclinique.com.mx
NEUBOX Internet SA de CV65.99.225.47 (- United States)
2016-05-06 20:30Botnet C&CTeslaCrypt
laidclinique.com.mx
NEUBOX Internet SA de CV65.99.225.47 (- United States)
2016-05-06 18:00Botnet C&CLocky
78.47.110.82
78.47.110.82 (- Germany)
2016-05-06 13:38Distribution SiteLocky
4ix.com
ENOM, INC.203.129.113.142 (- Japan)
2016-05-06 11:53Distribution SiteLocky
drdianateachertraining.com
GODADDY.COM, LLC (n/a)
2016-05-06 11:14Distribution SiteLocky
taninabandb.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.38.26 (- Italy)
2016-05-06 10:47Distribution SiteLocky
rulshtory.wmlead.ru
RU-CENTER-RU (n/a)
2016-05-06 09:22Distribution SiteLocky
cliente1.gugliandolo.com
TUCOWS DOMAINS INC.85.235.131.88 (- Italy)
2016-05-06 09:08Distribution SiteLocky
topcarshop.ir
87.98.227.214 (- Spain)
2016-05-06 08:42Payment SiteTeslaCrypt
ik4dm.mazerunci.at
(n/a)
2016-05-06 08:40Payment SiteTeslaCrypt
y4bxj.adozeuds.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-05-06 08:32Distribution SiteLocky
akarui.org
GoDaddy.com, LLC166.62.30.158 (- United States)
2016-05-06 08:32Distribution SiteLocky
spraszyn.home.pl
home.pl S.A.79.96.92.220 (- Poland)
2016-05-06 08:31Distribution SiteLocky
virusremovals.org
Name.com, LLC (n/a)
2016-05-06 08:31Distribution SiteLocky
istvest.com
TUCOWS DOMAINS INC. (n/a)
2016-05-06 08:31Distribution SiteLocky
ikiartimatbaa.com
NICS TELEKOMUNIKASYON TICARET LT[...]94.73.150.20 (- Turkey)
2016-05-06 06:02Distribution SiteLocky
shopngocquyen.com
GODADDY.COM, LLC74.119.239.234 (- United States)
2016-05-05 14:49Botnet C&CTeslaCrypt
hypnotiseyourself.co.uk
123-Reg Limited t/a 123-reg50.87.146.83 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >