Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-12 13:07Distribution SiteLocky
tivicast.org
Chengdu West Dimension Digital T[...] (n/a)
2016-12-12 13:07Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:07Distribution SiteLocky
wordpad.org
MarkMonitor Inc.66.155.40.24 (- United States)
2016-12-12 13:07Distribution SiteLocky
wphone3c.com
GODADDY.COM, LLC74.220.199.6 (- United States)
2016-12-12 13:07Distribution SiteLocky
trendsandtrades.nl
TransIP BV79.99.25.29 (- Netherlands)
2016-12-12 13:07Distribution SiteLocky
thenumastore.com
GODADDY.COM, LLC195.22.26.248 (- Portugal)
2016-12-12 13:07Distribution SiteLocky
117.239.70.228
n/a
2016-12-12 13:06Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
democro.com
BIGROCK SOLUTIONS LIMITED (n/a)
2016-12-12 13:06Distribution SiteLocky
hooli.com.au
Web Address Registration27.50.95.218 (- Australia)
2016-12-12 13:06Distribution SiteLocky
trehoada.org
GMO Internet, Inc. d/b/a Onamae.[...]123.30.187.207 (- Vietnam)
2016-12-12 13:06Distribution SiteLocky
tifa-awards.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]150.107.31.57 (- Thailand)
2016-12-12 13:05Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:05Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:05Distribution SiteLocky
trade-unite.ru
R01-RU80.78.245.178 (- Russian Federation)
2016-12-12 13:05Distribution SiteLocky
www.pspmrsmag.com
NETEARTH ONE INC. D/B/A NETEARTH103.27.72.10 (- Malaysia)
2016-12-12 13:05Distribution SiteLocky
villa64.dk
94.231.109.94 (- Denmark)
2016-12-12 13:05Distribution SiteLocky
socialandmovieapps.com
ENOM, INC. (n/a)
2016-12-12 13:04Distribution SiteLocky
galtechprojects.com
GODADDY.COM, LLC206.72.192.15 (- United States)
2016-12-12 13:04Distribution SiteLocky
www.paradisecity.pk
(n/a)
2016-12-12 13:04Distribution SiteLocky
goodfoodprod.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
bestbuylocal.com
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-12 13:04Distribution SiteLocky
therapymarketinginstitute.com
WILD WEST DOMAINS, LLC67.225.243.198 (- United States)
2016-12-12 13:04Distribution SiteLocky
thxlove.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.52.101.178 (- United States)
2016-12-12 13:04Distribution SiteLocky
stmerchandise.net
OMNIS NETWORK, LLC216.239.138.216 (- United States)
2016-12-12 13:04Distribution SiteLocky
dronetech.no
46.30.213.169 (- Denmark)
2016-12-12 13:03Distribution SiteLocky
stephaniemiddendorp.nl
Mijn InternetOplossing B.V.109.237.214.243 (- Netherlands)
2016-12-12 13:03Distribution SiteLocky
www.bfsa.gov.bd
198.54.120.18 (- United States)
2016-12-12 13:03Distribution SiteLocky
megapowercash.com
GODADDY.COM, LLC107.180.47.13 (- United States)
2016-12-12 13:03Distribution SiteLocky
sovereignkitchens.com.au
Web Address Registration149.28.181.176 (- United States)
2016-12-12 13:03Distribution SiteLocky
icclicks.com
GODADDY.COM, LLC23.20.239.12 (- United States)
2016-12-12 13:03Distribution SiteLocky
skpc.org.au
Synergy Wholesale Pty Ltd192.124.249.18 (- United States)
2016-12-12 13:03Distribution SiteLocky
trilab.sk
163.172.34.76 (- France)
2016-12-12 13:03Distribution SiteLocky
www.refereccu.com
GODADDY.COM, LLC184.168.131.241 (- United States)
2016-12-12 13:03Distribution SiteLocky
www.pspmrsmtumpat.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.8.25.16 (- Malaysia)
2016-12-12 13:03Distribution SiteLocky
www.icp.edu.pk
23.226.129.112 (- United States)
2016-12-12 13:02Distribution SiteLocky
wkreation.com
OMNIS NETWORK, LLC216.239.138.131 (- United States)
2016-12-12 13:02Distribution SiteLocky
speckftp.de
87.106.247.11 (- Germany)
2016-12-12 13:02Distribution SiteLocky
sinanagirman.com
IHS TELEKOM, INC.195.22.26.248 (- Portugal)
2016-12-12 13:02Distribution SiteLocky
greenresist.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-12-12 10:38Botnet C&CLocky
91.219.31.14
91.219.31.14 (- Russian Federation)
2016-12-12 07:04Payment SiteTorrentLocker
ztuw5bvuuapzdfya.klimbim.pl
EPAG Domainservices GmbH (n/a)
2016-12-11 14:26Botnet C&CLocky
lcrdceiajmiar.org
eNom, Inc.208.100.26.234 (- United States)
2016-12-11 07:38Payment SiteCerber
ffoqr3ug7m726zou.wmvsh0.top
Eranet International Limited (n/a)
2016-12-11 05:19Payment SiteCerber
ffoqr3ug7m726zou.utebcd.top
Eranet International Limited (n/a)
2016-12-11 03:35Payment SiteCerber
ffoqr3ug7m726zou.x9ap4h.top
Eranet International Limited (n/a)
2016-12-11 01:58Payment SiteCerber
pe2cku7pebkpgeko.utebcd.top
Eranet International Limited (n/a)
2016-12-11 01:50Payment SiteCerber
pe2cku7pebkpgeko.z5xfkc.top
Eranet International Limited (n/a)
2016-12-11 00:07Payment SiteCerber
pe2cku7pebkpgeko.reu88i.top
Eranet International Limited (n/a)
2016-12-10 22:53Payment SiteCerber
ffoqr3ug7m726zou.umvv28.top
Eranet International Limited (n/a)
2016-12-10 18:56Payment SiteCerber
ffoqr3ug7m726zou.smd95z.top
Eranet International Limited (n/a)
2016-12-10 18:31Botnet C&CLocky
185.102.136.67
185.102.136.67 (- Russian Federation)
2016-12-10 11:46Distribution SiteLocky
rondurkin.com
ENOM, INC.142.91.240.70 (- United States)
2016-12-10 11:46Distribution SiteLocky
wiselysoft.com
GODADDY.COM, LLC107.180.51.106 (- United States)
2016-12-10 11:46Distribution SiteLocky
xlr8services.com
TUCOWS DOMAINS INC.216.139.23.2 (- United States)
2016-12-10 11:46Distribution SiteLocky
travelinsider.com.au
TPP Internet (n/a)
2016-12-10 11:46Distribution SiteLocky
laferwear.com
GODADDY.COM, LLC50.63.202.61 (- United States)
2016-12-10 11:45Distribution SiteLocky
test.grafixx.org
Vautron Rechenzentrum AG62.75.162.77 (- France)
2016-12-10 11:45Distribution SiteLocky
sublimeshop.co.uk
Ascio Technologies Inc. Denmark [...]35.178.238.141 (- United States)
2016-12-10 11:45Distribution SiteLocky
u-niwon.com
NETPIA.COM, INC.14.128.132.150 (- Korea)
2016-12-10 11:45Distribution SiteLocky
stonerinsurance.com
DNC HOLDINGS, INC.198.71.232.3 (- United States)
2016-12-10 11:45Distribution SiteLocky
flax-fiber.com
CENTER OF UKRAINIAN INTERNET NAM[...]213.227.192.135 (- Ukraine)
2016-12-10 11:45Distribution SiteLocky
denva-art.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]119.18.42.101 (- Australia)
2016-12-10 11:44Distribution SiteLocky
windshieldrepairvancouver.ca
eNom Canada Corp. (n/a)
2016-12-10 10:47Payment SiteCerber
ffoqr3ug7m726zou.zee0xr.top
Eranet International Limited (n/a)
2016-12-09 21:08Payment SiteCerber
pe2cku7pebkpgeko.ttx0ig.top
Eranet International Limited (n/a)
2016-12-09 17:29Botnet C&CLocky
qcwbrevxrotoepsp.pw
Namecheap208.100.26.234 (- United States)
2016-12-09 13:12Distribution SiteLocky
maycongtrinhduylong.com
ONLINENIC, INC.123.30.210.117 (- Vietnam)
2016-12-09 13:11Distribution SiteLocky
sevenseas.lk
(n/a)
2016-12-09 13:11Distribution SiteLocky
spectrumvolunteer.org
GoDaddy.com, LLC192.124.249.11 (- United States)
2016-12-09 13:11Distribution SiteLocky
yaoyao2013.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-12-09 13:10Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 13:10Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:08Distribution SiteLocky
www.stavros.ca
Canadian Domain Name Services In[...]149.56.24.197 (- Canada)
2016-12-09 13:08Distribution SiteLocky
polgarorvasad.hu
(n/a)
2016-12-09 13:08Distribution SiteLocky
eringfeld.nl
Denit Internet Services BV94.126.70.11 (- Netherlands)
2016-12-09 13:07Distribution SiteLocky
walkonwheels.net.au
TPP Wholesale Pty Ltd (n/a)
2016-12-09 13:06Distribution SiteLocky
ktlelektro.cz
REG-WEB4U37.44.21.21 (- Czech Republic)
2016-12-09 13:06Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 13:05Distribution SiteLocky
yaxuantang.com
CHENGDU WEST DIMENSION DIGITAL T[...]154.91.228.227 (- Hong Kong)
2016-12-09 13:05Distribution SiteLocky
wszystkodokuchni.pl
premium.pl Sp. z o.o.188.116.8.137 (- Poland)
2016-12-09 13:04Distribution SiteLocky
dcareug.com
TUCOWS DOMAINS INC.160.153.93.130 (- United States)
2016-12-09 13:04Distribution SiteLocky
buhu5.ru
REGRU-RU185.4.65.222 (- Russian Federation)
2016-12-09 13:04Distribution SiteLocky
djelixir.com
GODADDY.COM, LLC66.198.240.13 (- United States)
2016-12-09 13:04Distribution SiteLocky
cafe-bg.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]193.68.112.65 (- Bulgaria)
2016-12-09 13:03Distribution SiteLocky
haibeiwuliu.com
HICHINA ZHICHENG TECHNOLOGY LTD.107.164.242.116 (- United States)
2016-12-09 13:03Distribution SiteLocky
angiebundy.com
1&1 INTERNET SE212.227.82.231 (- Germany)
2016-12-09 13:02Distribution SiteLocky
communicore.biz
ONLINENIC, INC. D/B/A CHINA-CHAN[...]208.52.174.23 (- United States)
2016-12-09 13:02Distribution SiteLocky
zealcon.com
GODADDY.COM, LLC50.62.252.30 (- United States)
2016-12-09 13:01Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 13:00Distribution SiteLocky
waat.co.uk
1 & 1 Internet SE217.160.0.249 (- Germany)
2016-12-09 13:00Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-12-09 12:59Distribution SiteLocky
kathollowell.com
GO FRANCE DOMAINS, LLC74.208.236.64 (- United States)
2016-12-09 12:59Distribution SiteLocky
pablopaz.com
ENOM, INC.143.95.60.166 (- United States)
2016-12-09 12:57Distribution SiteLocky
mikegranditsky.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]195.74.38.135 (- Sweden)
2016-12-09 12:57Distribution SiteLocky
vipseal.de
79.125.120.243 (- Ireland)
2016-12-09 12:56Distribution SiteLocky
fm1111.fr
1&1 Internet SE217.160.0.12 (- Germany)
2016-12-09 12:55Distribution SiteLocky
kh2.co.uk
Plusnet Plc t/a Just-the-Name93.113.111.15 (- United Kingdom)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >