Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-12-09 12:55Distribution SiteLocky
youhaoyouduo.com
BIZCN.COM, INC.154.210.201.115 (- United States)
2016-12-09 12:55Distribution SiteLocky
cstcarpenteria.it
TOPHOST-REG94.177.223.24 (- Italy)
2016-12-09 12:54Distribution SiteLocky
braindouble.com
GODADDY.COM, LLC (n/a)
2016-12-09 06:44Distribution SiteLocky
wt7dzbn78.homepage.t-online.de
80.150.6.138 (- Germany)
2016-12-09 06:43Distribution SiteLocky
bigtrust.co.kr
211.40.221.90 (- Korea)
2016-12-09 06:43Distribution SiteLocky
jhengineering.szm.com
GRANSY S.R.O D/B/A SUBREG.CZ85.248.42.103 (- Slovakia)
2016-12-09 06:43Distribution SiteLocky
210.240.104.2
n/a
2016-12-09 06:43Distribution SiteLocky
zophotos.com
REGISTER.COM, INC.162.213.255.16 (- United States)
2016-12-09 06:43Distribution SiteLocky
guardian-angels-diva.de
46.105.50.252 (- France)
2016-12-09 06:42Distribution SiteLocky
weboriginal.eu
NETIM160.153.129.222 (- United States)
2016-12-09 06:42Distribution SiteLocky
www.young-boys-hawisch.de
(n/a)
2016-12-09 06:42Distribution SiteLocky
rulebraker.ru
RU-CENTER-RU79.137.163.52 (- Russian Federation)
2016-12-09 06:42Distribution SiteLocky
sublimeshop.co.uk
Ascio Technologies Inc. Denmark [...]35.178.238.141 (- United States)
2016-12-09 06:42Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:42Distribution SiteLocky
smc.psuti.ru
NAUNET-RU94.25.37.27 (- Russian Federation)
2016-12-09 06:41Distribution SiteLocky
laferwear.com
GODADDY.COM, LLC50.63.202.49 (- United States)
2016-12-09 06:41Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:40Distribution SiteLocky
u-niwon.com
NETPIA.COM, INC.14.128.132.150 (- Korea)
2016-12-09 06:40Distribution SiteLocky
wudiai.com
ENAME TECHNOLOGY CO., LTD.119.28.63.252 (- China)
2016-12-09 06:40Distribution SiteLocky
www.serial-production.com
EPAG DOMAINSERVICES GMBH78.46.57.207 (- Germany)
2016-12-09 06:39Distribution SiteLocky
alci.dommel.be
SCHEDOM NV / DOMMEL.COM (n/a)
2016-12-09 06:39Distribution SiteLocky
viscarci.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-12-09 06:39Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:39Distribution SiteLocky
theamericanwake.com
ENOM, INC.162.241.216.152 (- United States)
2016-12-09 06:39Distribution SiteLocky
maycongtrinhduylong.com
ONLINENIC, INC.123.30.210.117 (- Vietnam)
2016-12-09 06:39Distribution SiteLocky
vipseal.de
79.125.120.243 (- Ireland)
2016-12-09 06:38Distribution SiteLocky
malamut.org
Key-Systems GmbH212.85.104.64 (- Poland)
2016-12-09 06:38Distribution SiteLocky
markettv.ro
ICI - ROTLD (n/a)
2016-12-09 06:38Distribution SiteLocky
mondegraphic.com
ENOM, INC.195.22.26.248 (- Portugal)
2016-12-09 06:38Distribution SiteLocky
blackdildo.net
ENOM, INC. (n/a)
2016-12-09 06:38Distribution SiteLocky
yug13.com
HICHINA ZHICHENG TECHNOLOGY LTD.107.167.64.2 (- United States)
2016-12-09 06:38Distribution SiteLocky
unilite.ro
ROSPOT SRL (n/a)
2016-12-09 06:38Distribution SiteLocky
www.arstaelteknik.com
NICTRADE INTERNET IDENTITY PROVI[...] (n/a)
2016-12-09 06:37Distribution SiteLocky
policyforlife.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-12-09 06:37Distribution SiteLocky
admin3.rtaf.mi.th
T.H.NIC Co., Ltd. (n/a)
2016-12-09 06:37Distribution SiteLocky
szwanrong.com
XIN NET TECHNOLOGY CORPORATION119.29.99.214 (- China)
2016-12-09 06:36Distribution SiteLocky
stonerinsurance.com
DNC HOLDINGS, INC.198.71.232.3 (- United States)
2016-12-09 06:36Distribution SiteLocky
www.dsalchi.org
eNom, Inc. (n/a)
2016-12-09 06:36Distribution SiteLocky
www.cosentinoarredamenti.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]46.254.39.57 (- Italy)
2016-12-09 06:36Distribution SiteLocky
zagle.zbaszynek.pl
nazwa.pl sp. z o.o. (n/a)
2016-12-09 06:35Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:35Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:35Distribution SiteLocky
akristall.ru
RU-CENTER-RU (n/a)
2016-12-09 06:35Distribution SiteLocky
u-flats.com
GODADDY.COM, LLC209.236.73.195 (- United States)
2016-12-09 06:35Distribution SiteLocky
polgarorvasad.hu
(n/a)
2016-12-09 06:34Distribution SiteLocky
steelfs.com.mx
NEUBOX Internet SA de CV207.210.232.52 (- United States)
2016-12-09 06:34Distribution SiteLocky
www.keytone-production.de
(n/a)
2016-12-09 06:33Distribution SiteLocky
smp.com.mx
Hospedando.Com.Mx67.227.237.237 (- United States)
2016-12-09 06:33Distribution SiteLocky
test.grafixx.org
Vautron Rechenzentrum AG62.75.162.77 (- France)
2016-12-09 06:33Distribution SiteLocky
berndburgdorf.de
(n/a)
2016-12-09 06:33Distribution SiteLocky
essenciadoequilibrio.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.90.56.166 (- Portugal)
2016-12-09 06:33Distribution SiteLocky
windshieldrepairvancouver.ca
eNom Canada Corp. (n/a)
2016-12-09 06:33Distribution SiteLocky
yaopuwang.cn
浙江贰贰网络有限公司120.24.85.109 (- China)
2016-12-09 06:33Distribution SiteLocky
www.damasoinfante.com
10DENCEHISPAHARD, S.L134.0.11.154 (- Spain)
2016-12-09 06:33Distribution SiteLocky
water1004.com
MEGAZONE CORP. DBA HOSTING.KR (n/a)
2016-12-09 06:32Distribution SiteLocky
technobuz.com
GODADDY.COM, LLC46.166.182.110 (- Netherlands)
2016-12-09 06:32Distribution SiteLocky
youspeak.pt
109.71.40.109 (- Portugal)
2016-12-09 06:32Distribution SiteLocky
www.visionaero.com
NETWORK SOLUTIONS, LLC.64.71.34.45 (- United States)
2016-12-09 06:32Distribution SiteLocky
subys.com
DOTNAME KOREA CORP (n/a)
2016-12-09 06:31Distribution SiteLocky
djprestige.net
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-12-09 06:31Distribution SiteLocky
buhoutserts.ru
REGRU-RU (n/a)
2016-12-09 06:31Distribution SiteLocky
otdamvam.com
GODADDY.COM, LLC31.31.196.21 (- Russian Federation)
2016-12-09 06:31Distribution SiteLocky
mikegranditsky.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]195.74.38.135 (- Sweden)
2016-12-09 06:31Distribution SiteLocky
aetech-solutions.com
DOMAIN.COM, LLC37.59.51.53 (- France)
2016-12-09 06:30Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:30Distribution SiteLocky
opal.webserwer.pl
Lingua-IT Sp. z o.o.176.32.162.200 (- Poland)
2016-12-09 06:30Distribution SiteLocky
www.jansen-consultancy-machines.be
Telenet BVBA195.130.132.84 (- Belgium)
2016-12-09 06:30Distribution SiteLocky
zivilrecht.at
216.55.105.144 (- Canada)
2016-12-09 06:29Distribution SiteLocky
www.jacquesdalne.net
TUCOWS DOMAINS INC.195.238.0.64 (- Belgium)
2016-12-09 06:29Distribution SiteLocky
wiselysoft.com
GODADDY.COM, LLC107.180.51.106 (- United States)
2016-12-09 06:29Distribution SiteLocky
lhhme.com.sg
IP MIRROR PTE LTD103.9.101.111 (- Singapore)
2016-12-09 06:29Distribution SiteLocky
www.swordwind.org
GoDaddy.com, LLC185.230.60.177 (- Israel)
2016-12-09 06:29Distribution SiteLocky
containermx.com
INTERNET DOMAIN SERVICE BS CORP (n/a)
2016-12-09 06:29Distribution SiteLocky
xlr8services.com
TUCOWS DOMAINS INC.216.139.23.2 (- United States)
2016-12-09 06:29Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:29Distribution SiteLocky
STRAHOVOYSPOR.RU
(n/a)
2016-12-09 06:28Distribution SiteLocky
smartnew.eu
Schlund+Partner AG217.160.230.189 (- Germany)
2016-12-09 06:28Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:28Distribution SiteLocky
andreysoloviev.ru
RU-CENTER-RU (n/a)
2016-12-09 06:28Distribution SiteLocky
www.eacglobal.us
DELUXE SMALL BUSINESS SALES, INC[...] (n/a)
2016-12-09 06:28Distribution SiteLocky
networkphd.com
NETWORK SOLUTIONS, LLC.64.71.35.11 (- United States)
2016-12-09 06:28Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:28Distribution SiteLocky
mail4host.xyz
ERANET INTERNATIONAL LIMITED (n/a)
2016-12-09 06:27Distribution SiteLocky
w91pd9457.homepage.t-online.de
80.150.6.138 (- Germany)
2016-12-09 06:27Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:27Distribution SiteLocky
modulofm.com.br
104.31.92.184 (- United States) +1 A record(s) 104.31.93.184 (AS13335, - United States)
2016-12-09 06:26Distribution SiteLocky
wn420pjpa.homepage.t-online.de
80.150.6.138 (- Germany)
2016-12-09 06:26Distribution SiteLocky
zealcon.com
GODADDY.COM, LLC50.62.252.30 (- United States)
2016-12-09 06:26Distribution SiteLocky
yu1paintingco.com
DOMAINPEOPLE, INC.64.71.34.138 (- United States)
2016-12-09 06:26Distribution SiteLocky
www.liviazottola.it
TISCALIDOMAIN-REG213.205.38.37 (- Italy)
2016-12-09 06:26Distribution SiteLocky
impregui.com
10DENCEHISPAHARD, S.L217.160.0.32 (- Germany)
2016-12-09 06:26Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:26Distribution SiteLocky
travelinsider.com.au
TPP Internet (n/a)
2016-12-09 06:25Distribution SiteLocky
chanet.jp
210.196.232.211 (- Japan)
2016-12-09 06:25Distribution SiteLocky
fitnesscoffee.biz
ERANET INTERNATIONAL LIMITED104.168.87.215 (- United States) +1 A record(s) 162.244.78.182 (AS19531, - United States)
2016-12-09 06:25Distribution SiteLocky
vreaununta.ro
ICI - ROTLD176.223.208.16 (- Europe)
2016-12-09 06:24Distribution SiteLocky
zhongyunshiji.com
XIN NET TECHNOLOGY CORPORATION (n/a)
2016-12-09 06:24Distribution SiteLocky
ucbus.net
CHENGDU WEST DIMENSION DIGITAL T[...]172.252.211.196 (- United States)
2016-12-09 06:24Distribution SiteLocky
vilalusa.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]72.52.4.119 (- United States)
2016-12-09 06:24Distribution SiteLocky
software.waleshigh.com
123-REG LIMITED (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >