Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-11-01 06:12Distribution SiteLocky
cirad.or.id
202.145.0.45 (- Indonesia)
2017-11-01 06:12Distribution SiteLocky
givagarden.com
Tucows Domains Inc.93.186.244.43 (- Italy)
2017-11-01 06:12Distribution SiteLocky
ingress.kannste.net
Cronon AG85.214.249.115 (- Germany)
2017-11-01 06:12Distribution SiteLocky
internet-webshops.de
217.160.224.147 (- Germany)
2017-10-31 09:53Distribution SiteLocky
hotelxaguate.com
PDR Ltd. d/b/a PublicDomainRegis[...]162.144.46.116 (- United States)
2017-10-31 09:53Distribution SiteLocky
rosiautosuli.hu
87.229.45.38 (- Hungary)
2017-10-31 09:53Distribution SiteLocky
edificioexpo.com
Arsys Internet, S.L. d/b/a NICLI[...]94.23.221.122 (- France)
2017-10-31 09:53Distribution SiteLocky
cqaqualite.com
1&1 Internet SE23.20.239.12 (- United States)
2017-10-31 09:52Distribution SiteLocky
first-paris-properties.com
OVH (n/a)
2017-10-31 09:43Botnet C&CLocky
aechjic.pw
Namecheap208.100.26.251 (- United States)
2017-10-31 09:43Botnet C&CLocky
95.85.19.195
95.85.19.195 (- Netherlands)
2017-10-30 15:44Distribution SiteLocky
pciholog.ru
RD-RU90.156.201.115 (- Russian Federation) +3 A record(s) 90.156.201.38 (AS25532, - Russian Federation)
90.156.201.48 (AS25532, - Russian Federation)
90.156.201.64 (AS25532, - Russian Federation)
2017-10-30 15:39Distribution SiteLocky
hobbystube.net
CPS-Datensysteme GmbH83.220.128.111 (- Germany)
2017-10-30 15:39Distribution SiteLocky
fuettern24.de
176.28.9.111 (- Germany)
2017-10-30 15:39Distribution SiteLocky
dvprojekt.hr
213.202.100.90 (- Croatia)
2017-10-29 00:14Botnet C&CPayCrypt
calicutsaawariya.com
GoDaddy.com, LLC192.185.182.56 (- United States)
2017-10-29 00:14Botnet C&CPayCrypt
calicutsaawariya.com
GoDaddy.com, LLC192.185.182.56 (- United States)
2017-10-28 22:59Botnet C&CPayCrypt
the-arts-today.com
GoDaddy.com, LLC192.185.41.213 (- United States)
2017-10-24 11:20Distribution SiteLocky
themclarenfamily.com
Key-Systems GmbH92.48.90.34 (- United Kingdom)
2017-10-24 11:20Distribution SiteLocky
tatianadecastelbajac.fr
AMEN / Agence des Médias Numériq[...] (n/a)
2017-10-24 11:20Distribution SiteLocky
video.rb-webdev.de
85.214.28.187 (- Germany)
2017-10-20 00:03Botnet C&CLocky
lvanwwbyabcfevyi.pw
Namecheapn/a
2017-10-20 00:03Botnet C&CLocky
88.214.236.11
88.214.236.11 (- Russian Federation)
2017-10-18 06:21Botnet C&CSage
mbfce24rgn65bx3g.is0hvt1.com
Trunkoz Technologies Pvt Ltd. d/[...] (n/a)
2017-10-14 12:52Botnet C&CLocky
vpuroeit.pw
Namecheapn/a
2017-10-13 14:52Botnet C&CSage
mbfce24rgn65bx3g.0ny42p.com
Web Commerce Communications Limi[...] (n/a)
2017-10-13 14:52Botnet C&CSage
mbfce24rgn65bx3g.hp8ewo.net
PakNIC (Private) Limited (n/a)
2017-10-12 05:08Distribution SiteLocky
lacosturera.es
86.109.170.198 (- Spain)
2017-10-12 05:08Distribution SiteLocky
missiegeslaagd.nl
WebReus46.235.40.31 (- Netherlands)
2017-10-12 05:08Distribution SiteLocky
itsmaterial.us
eNom, LLC98.124.252.176 (- United States)
2017-10-12 05:08Distribution SiteLocky
sambad.com.np
162.222.225.172 (- United States)
2017-10-12 05:07Distribution SiteLocky
fetchstats.net
Eranet International Limited (n/a)
2017-10-12 05:07Distribution SiteLocky
download.justowin.it
ARUBA-REG95.110.225.147 (- Italy)
2017-10-12 05:07Distribution SiteLocky
centralbaptistchurchnj.org
GoDaddy.com, LLC (n/a)
2017-10-12 05:07Distribution SiteLocky
motifahsap.com
PDR Ltd. d/b/a PublicDomainRegis[...]188.132.180.113 (- Turkey)
2017-10-12 05:07Distribution SiteLocky
shamanic-extracts.biz
GoDaddy.com, Inc.184.168.131.241 (- United States)
2017-10-12 05:07Distribution SiteLocky
basedow-bilder.de
194.116.187.130 (- Germany)
2017-10-12 05:07Distribution SiteLocky
pacalik.net
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-10-12 05:07Distribution SiteLocky
hair-select.jp
180.222.185.74 (- Japan)
2017-10-11 11:28Distribution SiteLocky
old.tuttoggi.info
Tucows Domains Inc.66.71.182.143 (- Italy)
2017-10-11 11:28Distribution SiteLocky
wiskundebijles.nu
Key-Systems GmbH62.212.95.30 (- Netherlands)
2017-10-11 11:28Distribution SiteLocky
georginabringas.com
Tucows Domains Inc.40.76.209.29 (- United States)
2017-10-11 11:28Distribution SiteLocky
team-bobcat.org
EPAG Domainservices GmbH (n/a)
2017-10-11 11:28Distribution SiteLocky
pdj.co.id
104.244.120.69 (- United States)
2017-10-11 11:27Distribution SiteLocky
t-plesk.com
PDR Ltd. d/b/a PublicDomainRegis[...]77.92.99.9 (- Turkey)
2017-10-11 11:27Distribution SiteLocky
resortphotographics.com
eNom, Inc.184.168.131.241 (- United States)
2017-10-11 11:27Distribution SiteLocky
eurecas.org
OnlineNIC Inc.188.65.87.2 (- Italy)
2017-10-11 11:27Distribution SiteLocky
highpressurewelding.co.uk
LCN.com Ltd35.240.15.72 (- United States)
2017-10-11 11:27Distribution SiteLocky
vithos.de
87.106.52.12 (- Germany)
2017-10-11 11:27Distribution SiteLocky
maule.biz
eNom, LLC98.124.251.176 (- United States)
2017-10-11 11:27Distribution SiteLocky
areanuova.it
WIDE-REG176.227.173.93 (- Italy)
2017-10-11 11:27Distribution SiteLocky
missinglynxsystems.com
GoDaddy.com, LLC66.36.173.181 (- United States)
2017-10-11 11:27Distribution SiteLocky
fetchstats.net
Eranet International Limited (n/a)
2017-10-11 11:27Distribution SiteLocky
jns.co.th
T.H.NIC Co., Ltd.203.146.43.65 (- Thailand)
2017-10-11 10:44Distribution SiteLocky
hellonwheelsthemovie.com
Tucows Domains Inc.66.36.165.149 (- United States)
2017-10-11 10:30Distribution SiteLocky
estudiperceptiva.com
Arsys Internet, S.L. d/b/a NICLI[...]86.109.170.66 (- Spain)
2017-10-11 10:30Distribution SiteLocky
mh-service.ru
RU-CENTER-RU89.253.235.118 (- Russian Federation)
2017-10-11 10:29Distribution SiteLocky
bit-chasers.com
eNom, Inc. (n/a)
2017-10-11 10:29Distribution SiteLocky
bjp.co.id
202.169.44.167 (- Indonesia)
2017-10-11 10:29Distribution SiteLocky
paulcruse.com
Tucows Domains Inc.91.215.186.147 (- United Kingdom)
2017-10-11 10:29Distribution SiteLocky
nsaflow.info
Eranet International Limited (n/a)
2017-10-11 10:29Distribution SiteLocky
monstermx.com
PDR Ltd. d/b/a PublicDomainRegis[...]72.34.251.187 (- United States)
2017-10-11 10:29Distribution SiteLocky
suncoastot.com
eNom, Inc.98.124.252.176 (- United States)
2017-10-11 10:29Distribution SiteLocky
logica-info.com
PDR Ltd. d/b/a PublicDomainRegis[...]103.58.102.36 (- Indonesia)
2017-10-10 18:54Distribution SiteLocky
estudiperceptiva.com
Arsys Internet, S.L. d/b/a NICLI[...]86.109.170.66 (- Spain)
2017-10-10 18:53Distribution SiteLocky
monstermx.com
PDR Ltd. d/b/a PublicDomainRegis[...]72.34.251.187 (- United States)
2017-10-10 18:50Distribution SiteLocky
bjp.co.id
202.169.44.167 (- Indonesia)
2017-10-10 18:50Distribution SiteLocky
nsaflow.info
Eranet International Limited (n/a)
2017-10-10 18:50Distribution SiteLocky
paulcruse.com
Tucows Domains Inc.91.215.186.147 (- United Kingdom)
2017-10-10 18:50Distribution SiteLocky
suncoastot.com
eNom, Inc.98.124.252.176 (- United States)
2017-10-10 18:49Distribution SiteLocky
bit-chasers.com
eNom, Inc. (n/a)
2017-10-10 18:49Distribution SiteLocky
logica-info.com
PDR Ltd. d/b/a PublicDomainRegis[...]103.58.102.36 (- Indonesia)
2017-10-10 18:49Distribution SiteLocky
mh-service.ru
RU-CENTER-RU89.253.235.118 (- Russian Federation)
2017-10-10 18:49Distribution SiteLocky
hellonwheelsthemovie.com
Tucows Domains Inc.66.36.165.149 (- United States)
2017-10-10 18:49Distribution SiteLocky
handhi.com
Tucows Domains Inc.162.213.255.19 (- United States)
2017-10-10 18:49Distribution SiteLocky
m-tensou.net
Tucows Domains Inc.202.218.252.73 (- Japan)
2017-10-10 08:55Distribution SiteLocky
henweekendsbirmingham.co.uk
Pulsant (Scotland) Ltd77.111.216.46 (- United Kingdom)
2017-10-10 08:55Distribution SiteLocky
test.sisap.ro
Hostvision SRL (n/a)
2017-10-10 08:54Distribution SiteLocky
deltasec.net
CSL Computer Service Langenbach [...] (n/a)
2017-10-10 08:54Distribution SiteLocky
agrourbis.com
Arsys Internet, S.L. d/b/a NICLI[...]86.109.170.66 (- Spain)
2017-10-10 08:54Distribution SiteLocky
xploramail.com
Soluciones Corporativas IP, SL (n/a)
2017-10-10 08:54Distribution SiteLocky
mastertenniscoach.com
GoDaddy.com, LLC69.16.209.47 (- United States)
2017-10-10 08:54Distribution SiteLocky
likiihillschool.com
Tucows Domains Inc. (n/a)
2017-10-10 08:54Distribution SiteLocky
axtes.com
OVH37.59.210.47 (- France)
2017-10-10 08:54Distribution SiteLocky
dueeffepromotion.com
eNom, Inc.89.96.90.14 (- Italy)
2017-10-10 08:54Distribution SiteLocky
nsaflow.info
Eranet International Limited (n/a)
2017-10-10 08:54Distribution SiteLocky
shahanabiomedicals.com
Name.com, Inc.64.140.170.18 (- United States)
2017-10-10 08:51Distribution SiteLocky
mediatrendsistem.com
DNC Holdings, Inc. (n/a)
2017-10-10 08:51Distribution SiteLocky
bodywork-sf.net
eNom, Inc. (n/a)
2017-10-10 08:51Distribution SiteLocky
brascopperchile.cl
(n/a)
2017-10-10 08:51Distribution SiteLocky
fls-portal.co.uk
ukfast.net Ltd t/a UKFast.Net Li[...] (n/a)
2017-10-10 08:50Distribution SiteLocky
evlilikpsikolojisi.com
Nics Telekomunikasyon Tic Ltd. S[...] (n/a)
2017-10-10 08:50Distribution SiteLocky
ashtontan.com
Tucows Domains Inc.103.6.198.208 (- Malaysia)
2017-10-10 08:50Distribution SiteLocky
essenza.co.id
202.169.44.141 (- Indonesia)
2017-10-10 08:50Distribution SiteLocky
gilgroup.com
Network Solutions, LLC.216.177.130.203 (- United States)
2017-10-10 08:50Distribution SiteLocky
scottfranch.org
Todaynic.com, Inc. (n/a)
2017-10-10 08:50Distribution SiteLocky
aeaccting.com
eNom, Inc.208.67.23.166 (- United States)
2017-10-10 08:49Distribution SiteLocky
bsfotodesign.com
eNom, Inc.80.172.241.44 (- Portugal)
2017-10-10 08:49Distribution SiteLocky
galeona.com
Arsys Internet, S.L. d/b/a NICLI[...]212.89.16.142 (- Spain)
2017-10-10 08:49Distribution SiteLocky
ashapeforlife.com
1&1 Internet SE217.160.0.51 (- Germany)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >