Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-15 06:41Distribution SiteLocky
eplotery.pl
Consulting Service Sp. z o.o.188.116.46.117 (- Poland)
2016-12-15 06:41Distribution SiteLocky
transunvip.com
CHENGDU WEST DIMENSION DIGITAL T[...]209.99.40.222 (- United States)
2016-12-15 06:41Distribution SiteLocky
demo.evgesha.ru
RU-CENTER-RU95.165.159.185 (- Russian Federation)
2016-12-15 06:41Distribution SiteLocky
zzzort10xtest123.com
REGISTER.COM, INC.209.235.144.9 (- United States)
2016-12-15 06:41Distribution SiteLocky
roman64.humlak.cz
REG-ACTIVE24194.12.32.194 (- Czech Republic)
2016-12-15 06:41Distribution SiteLocky
www.vidcampaign.com
GODADDY.COM, LLC148.66.156.67 (- Singapore)
2016-12-15 06:40Distribution SiteLocky
vaaren.dk
94.231.108.221 (- Denmark)
2016-12-15 06:40Distribution SiteLocky
zhiyuw.com
1 API GMBH (n/a)
2016-12-15 06:39Distribution SiteLocky
felipebueno.com
DOMAIN.COM, LLC173.244.172.42 (- United States)
2016-12-15 06:39Distribution SiteLocky
peopleprofit.in
Endurance Domains Technology Pvt[...]103.253.125.240 (- India)
2016-12-15 06:39Distribution SiteLocky
bappeda.dharmasrayakab.go.id
222.124.129.172 (- Indonesia)
2016-12-15 06:39Distribution SiteLocky
brigma.com
NAMESILO, LLC75.136.141.1 (- United States)
2016-12-15 06:39Distribution SiteLocky
test.invideohit.ru
ARDIS-RU (n/a)
2016-12-15 06:39Distribution SiteLocky
toastmedia.co.uk
LCN.com Ltd162.241.136.216 (- United States)
2016-12-15 06:39Distribution SiteLocky
asdream.pl
Domeny.pl sp. z o.o. (n/a)
2016-12-15 06:39Distribution SiteLocky
www.dreamlifez.com
DOMAIN.COM, LLC (n/a)
2016-12-15 06:38Distribution SiteLocky
innercityarts.squaremdesign.com
GODADDY.COM, LLC (n/a)
2016-12-15 06:38Distribution SiteLocky
anti-dust.ru
REGRU-RU91.217.9.239 (- Russian Federation)
2016-12-15 06:38Distribution SiteLocky
travelinsider.com.au
TPP Internet (n/a)
2016-12-15 06:38Distribution SiteLocky
www.iaprog.nl
Flexwebhosting BV (n/a)
2016-12-15 06:38Distribution SiteLocky
backup.dressageclinic.com
DELUXE SMALL BUSINESS SALES, INC[...]192.124.249.157 (- United States)
2016-12-15 06:38Distribution SiteLocky
addwords.com.tr
188.124.3.30 (- Turkey)
2016-12-15 06:38Distribution SiteLocky
xn--k1affefe.xn--p1ai
213.133.98.216 (- Germany)
2016-12-15 06:38Distribution SiteLocky
theamericanwake.com
ENOM, INC.162.241.216.152 (- United States)
2016-12-15 06:38Distribution SiteLocky
yzwle.com
BIZCN.COM, INC.47.90.16.240 (- Hong Kong)
2016-12-15 06:38Distribution SiteLocky
gui92.vn
103.28.38.23 (- Vietnam)
2016-12-15 06:38Distribution SiteLocky
followmyleadatl.com
GODADDY.COM, LLC192.124.249.15 (- United States)
2016-12-15 06:37Distribution SiteLocky
wx.utaidu.com
HICHINA ZHICHENG TECHNOLOGY LTD.122.114.47.82 (- China)
2016-12-15 06:37Distribution SiteLocky
ninkala.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-12-15 06:36Distribution SiteLocky
xn--80ajjchqepikd1b.xn--80asehdb
(n/a)
2016-12-15 06:36Distribution SiteLocky
gratissexchat.org
GoDaddy.com, LLC54.72.130.67 (- Ireland)
2016-12-15 06:36Distribution SiteLocky
ws.osenilo.com
GODADDY.COM, LLC95.211.230.74 (- Netherlands)
2016-12-15 06:36Distribution SiteLocky
rulebraker.ru
RU-CENTER-RU79.137.163.52 (- Russian Federation)
2016-12-15 06:35Distribution SiteLocky
malamut.org
Key-Systems GmbH212.85.104.64 (- Poland)
2016-12-15 06:35Distribution SiteLocky
www.rencontreparis.org
OVH91.134.167.248 (- France)
2016-12-15 06:35Distribution SiteLocky
xlr8services.com
TUCOWS DOMAINS INC.216.139.23.2 (- United States)
2016-12-15 06:35Distribution SiteLocky
172.246.84.150
n/a
2016-12-15 06:35Distribution SiteLocky
hedefosgb.com
REG2C.COM, INC. (n/a)
2016-12-15 06:34Distribution SiteLocky
www.majorleaguesecurity.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-12-15 06:34Distribution SiteLocky
ucbus.net
CHENGDU WEST DIMENSION DIGITAL T[...]172.252.211.196 (- United States)
2016-12-14 16:52Distribution SiteLocky
perspektive-fuer-kinder.de
217.160.0.190 (- Germany)
2016-12-14 16:52Distribution SiteLocky
buttonart.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-14 16:51Distribution SiteLocky
demo.ahost5.ru
REGRU-RU185.53.178.7 (- Germany)
2016-12-14 16:46Distribution SiteLocky
antonbogov.com
CSL COMPUTER SERVICE LANGENBACH [...]195.206.228.46 (- Slovenia)
2016-12-14 12:28Botnet C&CLocky
193.70.86.51
193.70.86.51 (- France)
2016-12-14 11:57Distribution SiteLocky
amaniinitiative.org
Domain.com, LLC103.116.16.143 (- United States of America)
2016-12-14 11:57Distribution SiteLocky
rkf3460.dk
46.30.213.4 (- Denmark)
2016-12-14 11:57Distribution SiteLocky
lntproductions.com
123-REG LIMITED94.136.40.103 (- United Kingdom)
2016-12-14 11:57Distribution SiteLocky
old.strommarnas.se
SE Direkt212.16.161.137 (- Sweden)
2016-12-14 11:57Distribution SiteLocky
reefclub.ru
RU-CENTER-RU (n/a)
2016-12-14 11:57Distribution SiteLocky
avtomoika23.ru
RU-CENTER-RU92.53.96.129 (- Russian Federation)
2016-12-14 11:57Distribution SiteLocky
bursacicekmagazasi.com
REG2C.COM, INC.188.124.24.242 (- Turkey)
2016-12-14 11:56Distribution SiteLocky
m.cuisines-aviva.com
OVH213.186.33.4 (- France)
2016-12-14 11:56Distribution SiteLocky
o-migunova.myjino.ru
R01-RU81.177.141.153 (- Russian Federation)
2016-12-14 11:56Distribution SiteLocky
demo.ghwchina.com
HICHINA ZHICHENG TECHNOLOGY LTD.101.201.148.61 (- China)
2016-12-14 11:56Distribution SiteLocky
www.jebbenterprises.com
TUCOWS DOMAINS INC.64.34.157.140 (- United States)
2016-12-14 11:56Distribution SiteLocky
arbeiten.pl
nazwa.pl sp. z o.o.185.23.21.161 (- Poland)
2016-12-14 11:56Distribution SiteLocky
downloadform.net
BIGROCK SOLUTIONS LIMITED (n/a)
2016-12-14 11:56Distribution SiteLocky
sstaswim.com
ENOM, INC. (n/a)
2016-12-14 11:56Distribution SiteLocky
demo.fishtime.com.ua
91.239.232.208 (- Ukraine)
2016-12-14 11:56Distribution SiteLocky
pacworld.com
ENOM, INC.104.247.75.8 (- United States)
2016-12-14 11:55Distribution SiteLocky
mainlinecarriers.co.tz
REG-XTREME145.239.7.159 (- United Kingdom)
2016-12-14 11:55Distribution SiteLocky
environment.ae
Etisalat104.24.122.60 (- United States) +1 A record(s) 104.24.123.60 (AS13335, - United States)
2016-12-14 11:55Distribution SiteLocky
store.elixe.net
REGIONAL NETWORK INFORMATION CEN[...] (n/a)
2016-12-14 11:55Distribution SiteLocky
test.easynet.net.au
Enetica (n/a)
2016-12-14 11:55Distribution SiteLocky
dryerventexpress.com
GODADDY.COM, LLC74.220.215.235 (- United States)
2016-12-14 11:55Distribution SiteLocky
alexandergorban.com
GODADDY.COM, LLC199.189.85.188 (- United States)
2016-12-14 11:54Distribution SiteLocky
bikebrowse.com
ENOM, INC.23.20.239.12 (- United States)
2016-12-14 11:54Distribution SiteLocky
test.verox.dk
94.231.103.117 (- Denmark)
2016-12-14 11:54Distribution SiteLocky
kayamuh.sarf.com.tr
(n/a)
2016-12-14 11:54Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-12-14 11:54Distribution SiteLocky
shortsuey.com
GODADDY.COM, LLC107.180.46.235 (- United States)
2016-12-14 11:54Distribution SiteLocky
ledticket.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]23.20.239.12 (- United States)
2016-12-14 11:54Distribution SiteLocky
kurochka-ryaba.ru
REGRU-RU193.124.191.67 (- Russian Federation)
2016-12-14 11:54Distribution SiteLocky
watchmeninc.com
GODADDY.COM, LLC208.97.190.174 (- United States)
2016-12-14 11:54Distribution SiteLocky
andrey.goldfine.ru
RU-CENTER-RU195.201.58.189 (- Russian Federation)
2016-12-14 11:53Distribution SiteLocky
dg.gamebuffet.mobi
GoDaddy.com, LLC111.90.140.234 (- Malaysia)
2016-12-14 11:53Distribution SiteLocky
adiosalvello.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...] (n/a)
2016-12-14 11:53Distribution SiteLocky
hotmusic.vipereskariot.ru
R01-RU (n/a)
2016-12-14 11:53Distribution SiteLocky
test.yanying100.com
GUANGDONG JINWANBANG TECHNOLOGY [...] (n/a)
2016-12-14 11:53Distribution SiteLocky
welovetofish.org
GoDaddy.com, LLC184.168.131.241 (- United States)
2016-12-14 11:52Distribution SiteLocky
mhmchicago.com
GODADDY.COM, LLC (n/a)
2016-12-14 11:52Distribution SiteLocky
giftoflife.nl
Registrar.eu146.66.80.230 (- United States)
2016-12-14 11:52Distribution SiteLocky
new.craescuela.net
INTERDOMINIOS, INC. (n/a)
2016-12-14 11:52Distribution SiteLocky
dicksmacker.com
GODADDY.COM, LLC (n/a)
2016-12-14 11:52Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.104.18.38.180 (- United States) +1 A record(s) 104.18.39.180 (AS13335, - United States)
2016-12-14 11:51Distribution SiteLocky
leonsi.eu
Tucows.com Co.129.121.31.156 (- United States)
2016-12-14 11:51Distribution SiteLocky
lucapotenziani.com
TUCOWS DOMAINS INC.82.223.67.107 (- Spain)
2016-12-14 11:51Distribution SiteLocky
mintthaicafe.com
1&1 INTERNET SE23.20.239.12 (- United States)
2016-12-14 11:51Distribution SiteLocky
gizlot.com
GODADDY.COM, LLC129.121.30.155 (- United States)
2016-12-14 11:51Distribution SiteLocky
e-pin.gr
(n/a)
2016-12-14 11:51Distribution SiteLocky
tocotrucking.com
NETWORK SOLUTIONS, LLC.50.87.121.237 (- United States)
2016-12-14 11:50Distribution SiteLocky
akkugarancia.hu
87.229.23.237 (- Hungary)
2016-12-14 11:50Distribution SiteLocky
mijnknwu.knwu.nl
Cloud VPS B.V.85.222.230.49 (- Netherlands)
2016-12-14 11:50Distribution SiteLocky
demo.pornuha4you.com
DOMAINCONTEXT, INC. (n/a)
2016-12-14 11:50Distribution SiteLocky
safataj.ir
185.94.96.58 (- Iran)
2016-12-14 11:50Distribution SiteLocky
nordvelay.fr
NUXIT (n/a)
2016-12-14 11:50Distribution SiteLocky
ypgg.kr
119.30.138.158 (- Korea)
2016-12-14 11:49Distribution SiteLocky
urachart.com
ONLINENIC, INC. (n/a)
2016-12-14 11:49Distribution SiteLocky
obccllc.com
GODADDY.COM, LLC195.22.26.248 (- Portugal)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >