Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-10-10 08:49Distribution SiteLocky
mtblanc-let.co.uk
123-Reg Limited t/a 123-reg (n/a)
2017-10-10 08:45Distribution SiteLocky
121-psychic-reading.co.uk
iDAQ Limited217.168.155.63 (- United Kingdom)
2017-10-10 08:45Distribution SiteLocky
designordie.ca
National CA Domains Ltd.204.244.185.219 (- Canada)
2017-10-10 08:45Distribution SiteLocky
hellonwheelsthemovie.com
Tucows Domains Inc.66.36.165.149 (- United States)
2017-10-10 08:44Distribution SiteLocky
cfai66.fr
OXYD SARL87.252.5.144 (- France)
2017-10-10 08:44Distribution SiteLocky
domke-engineering.de
81.169.145.151 (- Germany)
2017-10-09 11:20Distribution SiteLocky
scottfranch.org
Todaynic.com, Inc. (n/a)
2017-10-09 11:20Distribution SiteLocky
amatuermatch.org
Tucows Inc. (n/a)
2017-10-09 11:20Distribution SiteLocky
cagliaricity.it
WIDE-REG (n/a)
2017-10-09 11:20Distribution SiteLocky
hard-grooves.com
Tucows Domains Inc. (n/a)
2017-10-09 11:20Distribution SiteLocky
depomedikal.com
GoDaddy.com, LLC82.151.131.234 (- Turkey)
2017-10-09 11:20Distribution SiteLocky
prova.eshopavant.it
WIDE-REG217.73.227.30 (- Italy)
2017-10-09 11:19Distribution SiteLocky
anderlaw.com
eNom, Inc.98.124.251.69 (- United States)
2017-10-09 11:19Distribution SiteLocky
intra.cfecgcaquitaine.com
NUXIT (n/a)
2017-10-09 11:19Distribution SiteLocky
dewekker.nl
Denit Internet Services BV94.126.70.12 (- Netherlands)
2017-10-09 11:19Distribution SiteLocky
drspay.com
Wild West Domains, LLC68.178.159.168 (- United States)
2017-10-09 11:19Distribution SiteLocky
ecotek.me
GoDaddy.com, LLC (n/a)
2017-10-08 16:48Botnet C&CLocky
91.203.5.181
91.203.5.181 (- Ukraine)
2017-10-08 15:06Botnet C&CLocky
91.229.188.178
91.229.188.178 (- Russian Federation)
2017-10-06 11:28Distribution SiteLocky
alexandre-azaria.com
Network Solutions, LLC.195.154.231.6 (- France)
2017-10-06 11:28Distribution SiteLocky
a-host.co.uk
Fasthosts Internet Ltd (n/a)
2017-10-06 11:28Distribution SiteLocky
allesandradesigns.com
Deluxe Small Business Sales, Inc[...]206.189.64.156 (- United States)
2017-10-06 11:28Distribution SiteLocky
andresarlemijn.nl
NETZOZEKER B.V.195.60.215.74 (- Netherlands)
2017-10-06 11:28Distribution SiteLocky
appartement-sailer.at
(n/a)
2017-10-06 11:28Distribution SiteLocky
agriturismobellaria.net
Tucows Domains Inc.80.88.87.95 (- Italy)
2017-10-06 11:28Distribution SiteLocky
felixsolis.mobi
Hosting Concepts B.V. dba Openpr[...]81.46.223.159 (- Spain)
2017-10-06 11:28Distribution SiteLocky
3e.com.pt
92.48.69.11 (- United Kingdom) +1 A record(s) 94.76.206.12 (AS29550, - United Kingdom)
2017-10-06 11:28Distribution SiteLocky
agricom.it
WIDE-REG195.225.168.230 (- Italy)
2017-10-06 11:28Distribution SiteLocky
2-wave.com
GMO Internet, Inc. dba Onamae.co[...]209.54.62.81 (- United States)
2017-10-06 11:27Distribution SiteLocky
thedarkpvp.net
Eranet International Limited (n/a)
2017-10-06 11:27Distribution SiteLocky
PamelaSparrowChilds.com
GoDaddy.com, LLC (n/a)
2017-10-06 11:27Distribution SiteLocky
agriturismo-1001ulivo.it
WIDE-REG172.104.229.224 (- United States)
2017-10-05 17:59Distribution SiteLocky
balzantruck.com
Tucows Domains Inc.69.156.240.29 (- Canada)
2017-10-05 17:59Distribution SiteLocky
lasdamas.com
GoDaddy.com, LLC (n/a)
2017-10-05 17:59Distribution SiteLocky
ecofloraholland.nl
NR Automatisering95.142.51.67 (- Netherlands)
2017-10-05 17:59Distribution SiteLocky
pnkparamount.com
Network Solutions, LLC.217.160.231.196 (- Germany)
2017-10-05 17:59Distribution SiteLocky
conxibit.com
Melbourne IT, Ltd. d/b/a Interne[...]204.11.56.48 (- Virgin Islands)
2017-10-05 17:59Distribution SiteLocky
mrscrowe.net
Eranet International Limited (n/a)
2017-10-05 17:58Distribution SiteLocky
www.gtCartographic.co.uk
PDR Ltd. d/b/a PublicDomainRegis[...]82.145.60.140 (- United Kingdom)
2017-10-05 17:58Distribution SiteLocky
bnphealthcare.com
Deluxe Small Business Sales, Inc[...]103.58.102.39 (- Indonesia)
2017-10-05 17:58Distribution SiteLocky
ilibarcelos.pt
109.71.42.24 (- Portugal)
2017-10-05 17:58Distribution SiteLocky
georginabringas.com
Tucows Domains Inc.40.76.209.29 (- United States)
2017-10-05 17:58Distribution SiteLocky
abelfaria.pt
109.71.42.24 (- Portugal)
2017-10-05 17:58Distribution SiteLocky
teracom.co.id
103.58.102.38 (- Indonesia)
2017-10-05 17:54Botnet C&CLocky
5.196.200.229
5.196.200.229 (- France)
2017-10-05 09:24Distribution SiteLocky
173.83.200.78
n/a
2017-10-05 09:24Distribution SiteLocky
physicallyfocused.biz
Network Solutions, LLC64.40.110.199 (- Canada)
2017-10-05 09:24Distribution SiteLocky
173.83.200.79
n/a
2017-10-05 09:24Distribution SiteLocky
www.cioccolatopaolillo.it
ARUBA-REG62.149.140.213 (- Italy)
2017-10-05 09:24Distribution SiteLocky
adamjarekelk.freehost.pl
Consulting Service Sp. z o.o.195.114.0.64 (- Poland)
2017-10-05 09:24Distribution SiteLocky
www.gentechimpianti.com
Tucows Domains Inc.62.149.142.64 (- Italy)
2017-10-05 09:24Distribution SiteLocky
ernestoangiolini.com
Ascio Technologies, Inc. Danmark[...]89.46.107.219 (- Italy)
2017-10-05 09:24Distribution SiteLocky
www.mariodigregorio.it
ARUBA-REG62.149.140.134 (- Italy)
2017-10-05 08:09Distribution SiteLocky
artsidestudio.com
eNom, Inc. (n/a)
2017-10-05 08:09Distribution SiteLocky
trapiantivarese.org
Register.IT SPA (n/a)
2017-10-05 08:09Distribution SiteLocky
www.traders-forum.com
Tucows Domains Inc.62.149.140.55 (- Italy)
2017-10-05 08:09Distribution SiteLocky
pspcny.com
GoDaddy.com, LLC162.212.87.74 (- United States)
2017-10-05 08:09Distribution SiteLocky
timmah.users.whitehat.dk
91.221.196.204 (- Denmark)
2017-10-05 08:09Distribution SiteLocky
computerserviceheerhugowaard.nl
Worldwebdesign94.75.202.60 (- Netherlands)
2017-10-05 08:09Distribution SiteLocky
lacadosmurcia.com
Domain.com, LLC212.63.108.71 (- Spain)
2017-10-05 08:09Distribution SiteLocky
poslovnekomunikacije.si
DHH.si d.o.o.212.44.101.96 (- Slovenia)
2017-10-05 08:09Distribution SiteLocky
mis4.zenfinancial.com
OnlineNIC, Inc. (n/a)
2017-10-05 08:08Distribution SiteLocky
laveentrading.com
eNom, Inc. (n/a)
2017-10-05 08:08Distribution SiteLocky
www.rafaelgalindo.com
eNom, Inc.94.23.224.229 (- France)
2017-10-05 08:08Distribution SiteLocky
www.pizzelli.eu
Aruba S.p.A.62.149.140.180 (- Italy)
2017-10-05 08:08Distribution SiteLocky
derainlay.info
Eranet International Limited (n/a)
2017-10-05 08:08Distribution SiteLocky
ragazzemessenger.com
eNom, Inc.98.124.251.168 (- United States)
2017-10-05 08:08Distribution SiteLocky
foxcabinets.com
eNom, Inc.98.124.251.166 (- United States)
2017-10-05 08:08Distribution SiteLocky
mautau.it
MDSNET-REG80.88.87.192 (- Italy)
2017-10-05 08:08Distribution SiteLocky
photobookexpress.com
eNom, Inc.98.124.252.132 (- United States)
2017-10-04 20:06Botnet C&CLocky
qfuxosx.eu
eNom, Incn/a
2017-10-04 14:30Botnet C&CLocky
uuwflbmjmi.eu
eNom, Inc208.100.26.251 (- United States)
2017-10-04 09:27Distribution SiteLocky
ericweb.co.za
196.25.211.127 (- South Africa)
2017-10-04 09:27Distribution SiteLocky
tarimsalteknoloji.com
REG2C.COM, INC. (n/a)
2017-10-04 09:27Distribution SiteLocky
derainlay.info
Eranet International Limited (n/a)
2017-10-04 09:27Distribution SiteLocky
tailer.it
MDSNET-REG89.96.90.14 (- Italy)
2017-10-04 09:27Distribution SiteLocky
pciholog.ru
RD-RU90.156.201.115 (- Russian Federation) +3 A record(s) 90.156.201.38 (AS25532, - Russian Federation)
90.156.201.48 (AS25532, - Russian Federation)
90.156.201.64 (AS25532, - Russian Federation)
2017-10-04 09:27Distribution SiteLocky
schoensigns.com
GoDaddy.com, LLC (n/a)
2017-10-04 09:27Distribution SiteLocky
shopsshops.de
(n/a)
2017-10-04 09:27Distribution SiteLocky
tecnigrafite.com
eNom, Inc.89.96.90.16 (- Italy)
2017-10-04 09:27Distribution SiteLocky
scouting-bvb.nl
WebReus46.235.40.27 (- Netherlands)
2017-10-04 09:27Distribution SiteLocky
spazioireos.it
MCHOST-REG (n/a)
2017-10-04 09:27Distribution SiteLocky
cutwell.ca
eNom Canada Corp.98.124.251.68 (- United States)
2017-10-04 09:27Distribution SiteLocky
turfschiploge.nl
WebReus85.214.48.93 (- Germany)
2017-10-04 08:49Distribution SiteLocky
runkel.com.mx
ISINET173.201.253.230 (- United States)
2017-10-04 08:48Distribution SiteLocky
matern-eger.de
87.106.244.84 (- Germany)
2017-10-04 08:48Distribution SiteLocky
eternallyclassicjewelry.com
eNom, Inc.204.11.56.48 (- Virgin Islands)
2017-10-04 08:48Distribution SiteLocky
yoma888.com
Web Commerce Communications Limi[...] (n/a)
2017-10-04 08:48Distribution SiteLocky
restaurantelburladero.com
Soluciones Corporativas IP, SL5.2.88.79 (- Spain)
2017-10-04 08:48Distribution SiteLocky
420ent.com
eNom, Inc. (n/a)
2017-10-04 08:48Distribution SiteLocky
atez.vn
(n/a)
2017-10-04 08:48Distribution SiteLocky
envi-herzog.de
194.116.187.130 (- Germany)
2017-10-04 08:47Distribution SiteLocky
aimonino.info
Eranet International Limited (n/a)
2017-10-04 08:47Distribution SiteLocky
sabines-marmeladen.de
46.30.213.5 (- Denmark)
2017-10-04 08:47Distribution SiteLocky
acaciainvestigations.com
Register.com, Inc.208.79.200.25 (- United States)
2017-10-04 08:47Distribution SiteLocky
dbatee.gr
62.103.152.30 (- Greece)
2017-10-04 08:47Distribution SiteLocky
mysushi.it
NWEB-REG81.88.237.172 (- Italy)
2017-10-04 08:47Distribution SiteLocky
phmetreci.com
REG2C.COM, INC.185.150.128.21 (- Turkey)
2017-10-03 12:30Botnet C&CLocky
188.127.251.99
188.127.251.99 (- Russian Federation)
2017-10-03 09:15Distribution SiteLocky
embutidosanezcar.com
Soluciones Corporativas IP, SL5.2.88.79 (- Spain)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >