Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-29 06:13Distribution SiteLocky
ryrszs.com
BEIJING INNOVATIVE LINKAGE TECHN[...]154.91.83.49 (- Hong Kong)
2016-11-29 06:13Distribution SiteLocky
ptnewstart.com
CHENGDU WEST DIMENSION DIGITAL T[...]104.202.232.126 (- United States)
2016-11-29 06:13Distribution SiteLocky
theprick5k.com
TUCOWS DOMAINS INC.184.154.238.99 (- United States)
2016-11-29 06:13Distribution SiteLocky
norpecas.pt
188.93.229.84 (- Portugal)
2016-11-29 06:13Distribution SiteLocky
rentvspb.ru
RU-CENTER-RU91.214.71.3 (- Russian Federation)
2016-11-29 06:13Distribution SiteLocky
senabel.com
ENOM, INC. (n/a)
2016-11-29 06:13Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.45.63.10.218 (- United States)
2016-11-29 06:13Distribution SiteLocky
proracks.ro
ICI - ROTLD77.81.137.216 (- Romania)
2016-11-29 06:13Distribution SiteLocky
pysansheng.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-29 06:12Distribution SiteLocky
songpulatex.com
BEIJING INNOVATIVE LINKAGE TECHN[...]104.232.105.87 (- United States)
2016-11-29 06:12Distribution SiteLocky
plightadvertising.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]150.107.31.58 (- Thailand)
2016-11-29 06:12Distribution SiteLocky
tzabanga.com
ENOM, INC.109.203.116.242 (- United Kingdom)
2016-11-29 06:11Distribution SiteLocky
vanaken.nu
Hosting Concepts81.18.172.55 (- Netherlands)
2016-11-29 05:55Payment SiteTorrentLocker
4w5wihkwyhsav2ha.fastdances.at
(n/a)
2016-11-29 05:29Payment SiteCerber
vyohacxzoue32vvk.o08ra6.top
Eranet International Limited (n/a)
2016-11-29 04:53Payment SiteCerber
avsxrcoq2q5fgrw2.h44l3d.bid
Eranet International Limited (n/a)
2016-11-29 00:15Payment SiteCerber
vyohacxzoue32vvk.3peyo3.bid
Eranet International Limited (n/a)
2016-11-28 23:32Payment SiteCerber
vyohacxzoue32vvk.dgjpgy.top
Eranet International Limited (n/a)
2016-11-28 19:10Payment SiteCerber
vyohacxzoue32vvk.3m370u.top
Eranet International Limited (n/a)
2016-11-28 17:21Payment SiteCerber
ftoxmpdipwobp4qy.lxvmhm.top
Eranet International Limited (n/a)
2016-11-28 15:21Payment SiteCerber
ffoqr3ug7m726zou.bdlvdy.top
Eranet International Limited (n/a)
2016-11-28 12:57Distribution SiteLocky
rentvspb.ru
RU-CENTER-RU91.214.71.3 (- Russian Federation)
2016-11-28 12:57Distribution SiteLocky
sagaoil.ro
ICI - ROTLD91.210.80.80 (- Romania)
2016-11-28 12:56Distribution SiteLocky
prongai.com
ONLINENIC, INC.59.152.207.106 (- Hong Kong)
2016-11-28 12:08Distribution SiteLocky
skuter.c0.pl
Abc Hosting Ltd.95.211.144.65 (- Netherlands)
2016-11-28 12:08Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.45.63.10.218 (- United States)
2016-11-28 12:08Distribution SiteLocky
novacinema.eu
ZONER software, a.s.52.58.78.16 (- Germany)
2016-11-28 12:07Distribution SiteLocky
thoseads.com
GODADDY.COM, LLC199.79.54.237 (- United States)
2016-11-28 12:07Distribution SiteLocky
tandembikereviews.com
TUCOWS DOMAINS INC. (n/a)
2016-11-28 12:07Distribution SiteLocky
senabel.com
ENOM, INC. (n/a)
2016-11-28 12:07Distribution SiteLocky
phonerepairguy.com
GODADDY.COM, LLC132.148.38.159 (- United States)
2016-11-28 12:06Distribution SiteLocky
top2hot.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-28 12:06Distribution SiteLocky
tzabanga.com
ENOM, INC.109.203.116.242 (- United Kingdom)
2016-11-28 12:06Distribution SiteLocky
tatlikadinlar.com
GODADDY.COM, LLC162.241.218.226 (- United States)
2016-11-28 12:06Distribution SiteLocky
sineria.com
KEY-SYSTEMS GMBH91.134.171.210 (- Netherlands)
2016-11-28 12:06Distribution SiteLocky
skysoft.com.ph
203.119.4.201 (- Philippines)
2016-11-28 12:06Distribution SiteLocky
pysansheng.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-28 12:05Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-28 12:05Distribution SiteLocky
rhenn.ca
Go Daddy Domains Canada, Inc64.34.157.140 (- United States)
2016-11-28 12:05Distribution SiteLocky
pishitm.com
ONLINENIC, INC.23.238.220.74 (- United States)
2016-11-28 12:05Distribution SiteLocky
phaleshop.com
ONLINENIC, INC.23.20.239.12 (- United States)
2016-11-28 12:04Distribution SiteLocky
svcangel.com
GODADDY.COM, LLC107.180.44.152 (- United States)
2016-11-28 12:04Distribution SiteLocky
reginaautoauction.com
GODADDY.COM, LLC192.124.249.12 (- United States)
2016-11-28 12:04Distribution SiteLocky
proracks.ro
ICI - ROTLD77.81.137.216 (- Romania)
2016-11-28 12:04Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-28 12:04Distribution SiteLocky
richcity.net
DOMAIN.COM, LLC (n/a)
2016-11-28 12:03Distribution SiteLocky
right-livelihoods.org
PDR Ltd. d/b/a PublicDomainRegis[...]163.44.198.41 (- Thailand)
2016-11-28 12:03Distribution SiteLocky
raihaan.com
ENOM, INC.74.220.202.31 (- United States)
2016-11-28 12:03Distribution SiteLocky
sergloform.com
OVH151.80.85.229 (- Spain)
2016-11-28 12:03Distribution SiteLocky
leveeambon.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-28 12:03Distribution SiteLocky
restauranttajmahal.ca
Promo People Inc. (n/a)
2016-11-28 12:02Distribution SiteLocky
phukiengalaxy.com
ONLINENIC, INC.123.30.183.139 (- Vietnam)
2016-11-28 12:02Distribution SiteLocky
sinmotor.com
ENOM, INC.122.155.166.164 (- Thailand)
2016-11-28 12:02Distribution SiteLocky
somersetautotints.co.uk
eNom, Inc.87.117.230.164 (- United Kingdom)
2016-11-28 12:02Distribution SiteLocky
theprick5k.com
TUCOWS DOMAINS INC.184.154.238.99 (- United States)
2016-11-28 12:02Distribution SiteLocky
uslugitransportowe-warszawa.pl
INFO-CAL185.208.164.120 (- Poland)
2016-11-28 12:02Distribution SiteLocky
ojiplus.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.6.205.217 (- Indonesia)
2016-11-28 12:01Distribution SiteLocky
nyxiaoyuan.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-28 12:01Distribution SiteLocky
muka.tnmrk.ru
REGRU-RU (n/a)
2016-11-28 12:01Distribution SiteLocky
plightadvertising.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]150.107.31.58 (- Thailand)
2016-11-28 12:00Distribution SiteLocky
podsozn.ru
NAUNET-RU185.26.122.17 (- Russian Federation)
2016-11-28 12:00Distribution SiteLocky
readtogether.org.uk
123-Reg Limited t/a 123-reg (n/a)
2016-11-28 12:00Distribution SiteLocky
redacor.ro
ICI - ROTLD (n/a)
2016-11-28 12:00Distribution SiteLocky
rightofdecimal.com
GODADDY.COM, LLC192.186.204.102 (- United States)
2016-11-28 11:59Distribution SiteLocky
dherigrout.com
KEY-SYSTEMS GMBH (n/a)
2016-11-28 10:28Distribution SiteLocky
www.iweiboclub.com
CHENGDU WEST DIMENSION DIGITAL T[...]23.89.174.99 (- United States)
2016-11-28 10:28Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS4766, - United States)
2016-11-28 10:28Distribution SiteLocky
cadgewigan.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-28 10:28Distribution SiteLocky
lejiasheji.com
CHENGDU WEST DIMENSION DIGITAL T[...]23.20.239.12 (- United States)
2016-11-28 10:27Distribution SiteLocky
stellaar.com
NETWORK SOLUTIONS, LLC.184.168.221.42 (- United States)
2016-11-28 10:27Distribution SiteLocky
moni.sk
212.57.32.62 (- Slovakia)
2016-11-28 10:27Distribution SiteLocky
lordalexleon.com
1 API GMBH (n/a)
2016-11-28 10:27Distribution SiteLocky
sinklinga.com
KEY-SYSTEMS GMBHn/a
2016-11-28 10:27Distribution SiteLocky
koguciuk.pl
OVH SAS78.46.51.229 (- Germany)
2016-11-28 10:27Distribution SiteLocky
myphychoice.com
DOMAINPEOPLE, INC.216.110.144.157 (- United States)
2016-11-28 10:27Distribution SiteLocky
leadonn.com
XIAMEN CHINASOURCE INTERNET SERV[...]114.215.207.49 (- China)
2016-11-28 10:27Distribution SiteLocky
mainsl.es
31.47.73.164 (- Spain)
2016-11-28 10:27Distribution SiteLocky
imagine-hawaii.com
NETWORK SOLUTIONS, LLC.208.91.197.132 (- Virgin Islands)
2016-11-28 10:27Distribution SiteLocky
sexexpo.ro
ICI - ROTLD (n/a)
2016-11-28 10:27Distribution SiteLocky
trinechina.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.49 (- China)
2016-11-28 10:26Distribution SiteLocky
lecengwang.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-28 10:26Distribution SiteLocky
sinklinga.com
KEY-SYSTEMS GMBHn/a
2016-11-28 10:26Distribution SiteLocky
lv-nexis.com
IP MIRROR PTE LTD. DBA IP MIRROR103.104.196.34 (- Singapore)
2016-11-28 10:26Distribution SiteLocky
kaozheng.info
West263 International Limited (n/a)
2016-11-28 10:26Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-28 10:26Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:26Distribution SiteLocky
statikwerk.de
83.141.34.141 (- Germany)
2016-11-28 10:26Distribution SiteLocky
sandiegoblindandshade.com
GODADDY.COM, LLC65.75.140.66 (- United States)
2016-11-28 10:26Distribution SiteLocky
jobgroup.it
ITNET-REG151.1.48.10 (- Italy)
2016-11-28 10:26Distribution SiteLocky
jianminbuy.com
CHENGDU WEST DIMENSION DIGITAL T[...]154.91.228.216 (- Hong Kong)
2016-11-28 10:25Distribution SiteLocky
stream-renshosting.tk
Freedom Registry, Inc. (n/a)
2016-11-28 10:25Distribution SiteLocky
mainlinecarriers.co.tz
REG-XTREME145.239.7.159 (- United Kingdom)
2016-11-28 10:25Distribution SiteLocky
lowcostveterinarios.com
GODADDY.COM, LLC (n/a)
2016-11-28 10:25Distribution SiteLocky
cadgewigan.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-28 10:25Distribution SiteLocky
jumeioo.com
SHANGHAI YOVOLE NETWORKS INC.101.200.157.29 (- China)
2016-11-28 10:25Distribution SiteLocky
itemweb.fr
1&1 Internet SE217.160.9.174 (- Germany)
2016-11-28 10:25Distribution SiteLocky
lojaodaconstrucao.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]191.6.204.151 (- Brazil)
2016-11-28 10:25Distribution SiteLocky
kiminsitesi.com
ATAK DOMAIN HOSTING INTERNET VE [...]52.18.110.180 (- Ireland) +7 A record(s) 52.18.170.62 (AS16509, - Ireland)
52.19.79.55 (AS16509, - Ireland)
52.208.45.11 (AS16509, - Ireland)
52.209.240.149 (AS16509, - Ireland)
52.212.6.184 (AS16509, - Ireland)
52.215.9.235 (AS16509, - Ireland)
52.31.2.201 (AS16509, - Ireland)
2016-11-28 10:25Distribution SiteLocky
mingxingjx.com
CHENGDU WEST DIMENSION DIGITAL T[...]47.75.40.115 (- United States)
2016-11-28 10:25Distribution SiteLocky
cadgewigan.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >