Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-30 16:59Distribution SiteLocky
pertclinic.com
GODADDY.COM, LLC166.62.28.112 (- United States)
2016-11-30 16:59Distribution SiteLocky
nikanels.pl
Consulting Service Sp. z o.o.194.181.228.95 (- Poland)
2016-11-30 16:59Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-30 16:59Distribution SiteLocky
profit-group.sk
80.94.52.72 (- Slovakia)
2016-11-30 16:59Distribution SiteLocky
paulking.it
OMNIBUS-REG80.211.73.234 (- Italy)
2016-11-30 16:59Distribution SiteLocky
njzhigaokt.com
CHENGDU WEST DIMENSION DIGITAL T[...]45.195.157.160 (- Hong Kong)
2016-11-30 16:58Distribution SiteLocky
qybest.cn
成都西维数码科技有限[...]47.52.58.140 (- United States)
2016-11-30 16:58Distribution SiteLocky
pusulam.com.tr
94.73.147.54 (- Turkey)
2016-11-30 16:58Distribution SiteLocky
paronleather.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]180.92.182.23 (- Hong Kong)
2016-11-30 16:45Payment SiteCerber
pe2cku7pebkpgeko.ahovbr.top
Eranet International Limited (n/a)
2016-11-30 16:38Payment SiteCerber
avsxrcoq2q5fgrw2.y1fx4w.top
Eranet International Limited (n/a)
2016-11-30 13:27Payment SiteCerber
vyohacxzoue32vvk.mayrwf.top
Eranet International Limited (n/a)
2016-11-30 13:20Distribution SiteLocky
samaraorgsintez.ru
RU-CENTER-RU194.190.1.5 (- Russian Federation)
2016-11-30 13:20Distribution SiteLocky
samsebe.su
REGTIME-REG-FID (n/a)
2016-11-30 13:20Distribution SiteLocky
sallymills.com
PROMO PEOPLE, INC.116.90.62.38 (- Australia)
2016-11-30 13:20Distribution SiteLocky
rodneyagency.com
GODADDY.COM, LLC (n/a)
2016-11-30 13:20Distribution SiteLocky
raycon.ph
203.119.6.100 (- Philippines)
2016-11-30 13:20Distribution SiteLocky
sanjustoshopping.com.ar
200.68.105.93 (- Argentina)
2016-11-30 13:20Distribution SiteLocky
rescuemed.ca
Tucows.com Co.216.138.226.110 (- Canada)
2016-11-30 13:19Distribution SiteLocky
sam4x4.com
ENOM, INC.198.54.126.121 (- United States)
2016-11-30 13:19Distribution SiteLocky
rnitechnology.com
TUCOWS DOMAINS INC.69.90.160.250 (- Canada)
2016-11-30 13:19Distribution SiteLocky
s88.vdl.pl
Consulting Service Sp. z o.o.85.17.227.88 (- Netherlands)
2016-11-30 13:19Distribution SiteLocky
rotanatravel.com
1&1 INTERNET SE74.208.223.237 (- United States)
2016-11-30 13:19Distribution SiteLocky
sarayutechnologies.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-11-30 13:19Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-30 13:19Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-30 13:19Distribution SiteLocky
sbaky.com
GODADDY.COM, LLC184.168.221.60 (- United States)
2016-11-30 11:00Botnet C&CLocky
91.142.90.61
91.142.90.61 (- Russian Federation)
2016-11-30 10:57Botnet C&CLocky
95.213.195.123
95.213.195.123 (- Russian Federation)
2016-11-30 10:52Payment SiteCerber
avsxrcoq2q5fgrw2.5m2n7x.top
Eranet International Limited (n/a)
2016-11-30 10:11Payment SiteCerber
avsxrcoq2q5fgrw2.dgjpgy.top
Eranet International Limited (n/a)
2016-11-30 09:33Payment SiteCerber
vyohacxzoue32vvk.0ayn1s.top
Eranet International Limited (n/a)
2016-11-30 08:12Payment SiteCerber
avsxrcoq2q5fgrw2.lbxvhk.top
Eranet International Limited (n/a)
2016-11-30 08:11Payment SiteCerber
avsxrcoq2q5fgrw2.9c431m.bid
Eranet International Limited (n/a)
2016-11-29 22:37Payment SiteCerber
avsxrcoq2q5fgrw2.lxvmhm.top
Eranet International Limited (n/a)
2016-11-29 22:22Distribution SiteLocky
razborka-vigonka.ru
R01-RU81.177.6.12 (- Russian Federation)
2016-11-29 22:22Distribution SiteLocky
2012.rikschataxi.ch
Hostpoint AG217.26.54.17 (- Switzerland)
2016-11-29 22:22Distribution SiteLocky
sawadi.at
91.233.87.142 (- Germany)
2016-11-29 22:22Distribution SiteLocky
spunbaku.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 22:22Distribution SiteLocky
rao24gio.com
P.A. VIET NAM COMPANY LIMITED (n/a)
2016-11-29 19:28Payment SiteCerber
pe2cku7pebkpgeko.hclz73.top
Eranet International Limited (n/a)
2016-11-29 18:43Payment SiteCerber
ffoqr3ug7m726zou.jye7lt.top
Eranet International Limited (n/a)
2016-11-29 15:50Distribution SiteLocky
pokerjive.com
TUCOWS DOMAINS INC. (n/a)
2016-11-29 15:50Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:50Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:50Distribution SiteLocky
manage.parafx.com
TUCOWS DOMAINS INC.69.57.0.4 (- Canada)
2016-11-29 15:50Distribution SiteLocky
inthiraspa.com
GODADDY.COM, LLC27.254.96.180 (- Thailand)
2016-11-29 15:50Distribution SiteLocky
hongruilight.com
DOMAIN.COM, LLC (n/a)
2016-11-29 15:49Distribution SiteLocky
palisandr38.ru
REGRU-RU138.68.112.80 (- Germany)
2016-11-29 15:49Distribution SiteLocky
radstedjazz.dk
93.191.155.240 (- Denmark)
2016-11-29 15:49Distribution SiteLocky
lanphuong.vn
112.213.85.78 (- Vietnam)
2016-11-29 15:49Distribution SiteLocky
pdaconference.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-29 15:49Distribution SiteLocky
pgringette.ca
Promo People Inc.69.90.162.180 (- Canada)
2016-11-29 15:49Distribution SiteLocky
i12.ir
185.94.97.250 (- Iran)
2016-11-29 15:49Distribution SiteLocky
movewithgrace.ca
Tucows.com Co.104.18.38.180 (- United States) +1 A record(s) 104.18.39.180 (AS13335, - United States)
2016-11-29 15:48Distribution SiteLocky
interdean.hu
95.131.66.24 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:48Distribution SiteLocky
netshot.co.uk
Mr Max Ramyar t/a Abel Internet84.18.201.18 (- United Kingdom)
2016-11-29 15:48Distribution SiteLocky
keshuimei.com
GODADDY.COM, LLC104.217.122.189 (- United States)
2016-11-29 15:48Distribution SiteLocky
notyou.ru
R01-RU89.111.176.87 (- Russian Federation)
2016-11-29 15:48Distribution SiteLocky
ourfrontline.com
GODADDY.COM, LLC23.229.140.54 (- United States)
2016-11-29 15:48Distribution SiteLocky
oakscardclub.com
NETWORK SOLUTIONS, LLC.208.80.5.231 (- United States)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:48Distribution SiteLocky
ijiyo.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.196.252.15 (- China)
2016-11-29 15:48Distribution SiteLocky
komsutekstil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
lanchefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]108.179.253.194 (- United States)
2016-11-29 15:47Distribution SiteLocky
ozka.ro
Nexus Media SRL188.215.251.97 (- Romania)
2016-11-29 15:47Distribution SiteLocky
paynterroofing.com
DOMAINPEOPLE, INC.216.110.144.158 (- United States)
2016-11-29 15:47Distribution SiteLocky
huduanjichuang.com
BIZCN.COM, INC.23.104.231.181 (- United States)
2016-11-29 15:47Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:47Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:47Distribution SiteLocky
hotelmm.ro
Romarg SRL (n/a)
2016-11-29 15:47Distribution SiteLocky
iphoneservices.com.ua
(n/a)
2016-11-29 15:47Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:47Distribution SiteLocky
mckains.net
GODADDY.COM, LLC (n/a)
2016-11-29 15:46Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:46Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:46Distribution SiteLocky
ninjah47.home.pl
home.pl S.A. (n/a)
2016-11-29 15:46Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:46Distribution SiteLocky
muongcaupo.net
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:46Distribution SiteLocky
tytswirl.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-29 15:46Distribution SiteLocky
mirofusion.com
TUCOWS DOMAINS INC.72.51.24.224 (- United States)
2016-11-29 15:46Distribution SiteLocky
rosispitaniya.com
KEY-SYSTEMS GMBH (n/a)
2016-11-29 15:46Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-11-29 15:46Distribution SiteLocky
kjdot.com
HICHINA ZHICHENG TECHNOLOGY LTD.115.28.221.203 (- China)
2016-11-29 15:45Distribution SiteLocky
mooymedia.nl
Fast DRS188.227.200.134 (- Netherlands)
2016-11-29 15:45Distribution SiteLocky
palekar.com
TOTAL WEB SOLUTIONS LIMITED TRAD[...]91.109.14.192 (- United Kingdom)
2016-11-29 15:45Distribution SiteLocky
mmbeheer.nl
The Registrar Company B.V.31.186.173.82 (- Netherlands)
2016-11-29 15:45Distribution SiteLocky
jbec.kz
KAZNIC193.29.53.136 (- Kazakhstan)
2016-11-29 15:45Distribution SiteLocky
omrolsztyn.neostrada.pl
AZ.pl Sp. z o.o.217.97.216.17 (- Poland)
2016-11-29 15:45Distribution SiteLocky
portalmadureira.com
ENOM, INC.198.50.229.81 (- Brazil)
2016-11-29 15:45Distribution SiteLocky
ponticulus.eu
Zitcom A/S81.7.161.175 (- Denmark)
2016-11-29 15:45Distribution SiteLocky
haggyowser.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:45Distribution SiteLocky
edemalucia.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-29 15:45Distribution SiteLocky
guhrpaean.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-29 15:45Distribution SiteLocky
pathkids.com
TUCOWS DOMAINS INC.69.90.160.150 (- Canada)
2016-11-29 15:44Distribution SiteLocky
megalingeriemall.com
GODADDY.COM, LLC (n/a)
2016-11-29 15:44Distribution SiteLocky
islandspirits.ca
Tucows.com Co.67.223.100.2 (- Canada)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >