Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-10-03 09:15Distribution SiteLocky
fbl.com.sg
VODIEN INTERNET SOLUTIONS PTE LT[...]103.26.41.71 (- Singapore)
2017-10-03 09:15Distribution SiteLocky
jtpsolutions.com.au
AussieHQ Pty Ltd27.121.67.72 (- Australia)
2017-10-03 09:15Distribution SiteLocky
crack-attack.net
Cronon AG81.169.140.101 (- Germany)
2017-10-03 09:14Distribution SiteLocky
basedow-bilder.de
194.116.187.130 (- Germany)
2017-10-03 09:14Distribution SiteLocky
bridleridgehorses.com
eNom, Inc.98.124.251.204 (- United States)
2017-10-03 09:14Distribution SiteLocky
debralittleart.com
eNom, Inc.98.124.251.167 (- United States)
2017-10-03 09:14Distribution SiteLocky
enixgaming.de
(n/a)
2017-10-03 09:14Distribution SiteLocky
bibtic.net
10dencehispahard, S.L (n/a)
2017-10-03 09:13Distribution SiteLocky
charter-base.de
(n/a)
2017-10-03 09:13Distribution SiteLocky
kitami-ansin.com
GMO Internet, Inc. dba Onamae.co[...]125.206.115.97 (- Japan)
2017-10-03 09:13Distribution SiteLocky
3overpar.com
eNom, Inc. (n/a)
2017-10-03 09:13Distribution SiteLocky
pesonamas.co.id
103.58.102.38 (- Indonesia)
2017-10-03 05:30Distribution SiteLocky
petrochemus.com
eNom, Inc.98.124.251.72 (- United States)
2017-10-03 05:29Distribution SiteLocky
skyehoppus.com
Register.com, Inc. (n/a)
2017-10-03 05:29Distribution SiteLocky
schwellenwertdaten.de
(n/a)
2017-10-03 05:29Distribution SiteLocky
robsacks.com
eNom, Inc.132.148.139.81 (- United States)
2017-10-03 05:29Distribution SiteLocky
theceocforeporter.com
eNom, Inc.98.124.251.69 (- United States)
2017-10-03 05:29Distribution SiteLocky
leightonbrothers.co.uk
Namesco Limited185.2.4.60 (- Italy)
2017-10-03 05:29Distribution SiteLocky
wallstproperties.com
eNom, Inc.98.124.251.204 (- United States)
2017-10-03 05:28Distribution SiteLocky
motifahsap.com
PDR Ltd. d/b/a PublicDomainRegis[...]188.132.180.113 (- Turkey)
2017-10-03 05:28Distribution SiteLocky
pacalik.net
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-10-03 05:28Distribution SiteLocky
honeypot.egdevcenter.com
Key-Systems GmbH37.48.73.139 (- Netherlands)
2017-10-03 05:28Distribution SiteLocky
ichinose.de
87.106.244.84 (- Germany)
2017-10-02 16:00Botnet C&CLocky
dmwajvm.fr
1API GmbHn/a
2017-10-02 14:47Botnet C&CLocky
macooptwafkwchtpo.pw
Namecheapn/a
2017-10-02 14:47Botnet C&CLocky
89.108.84.87
89.108.84.87 (- Russian Federation)
2017-10-02 11:12Distribution SiteLocky
malvapraha.cz
REG-MEDIA4WEB46.234.101.64 (- Czech Republic)
2017-10-02 11:12Distribution SiteLocky
demeter.pt
80.172.241.22 (- Portugal)
2017-10-02 11:12Distribution SiteLocky
nekkeveldecoplus.nl
WebReus46.235.40.31 (- Netherlands)
2017-10-02 11:11Distribution SiteLocky
miguelangeltrabado.com
eNom, Inc. (n/a)
2017-10-02 11:11Distribution SiteLocky
ipezuela.com
Dinahosting SL37.152.88.57 (- Spain)
2017-10-02 11:11Distribution SiteLocky
globoart.es
86.109.170.198 (- Spain)
2017-10-02 11:11Distribution SiteLocky
colortown.pt
80.172.241.36 (- Portugal)
2017-10-02 11:10Distribution SiteLocky
sherylbro.net
Eranet International Limited (n/a)
2017-10-02 11:10Distribution SiteLocky
rmrcreative.com
Tucows Domains Inc.217.160.224.14 (- Germany)
2017-10-02 11:10Distribution SiteLocky
centralbaptistchurchnj.org
GoDaddy.com, LLC (n/a)
2017-10-02 11:10Distribution SiteLocky
maurocesari.it
WIDE-REG66.71.182.143 (- Italy)
2017-10-02 11:10Distribution SiteLocky
themaninroom306.com
Tucows Domains Inc.208.79.200.232 (- United States)
2017-10-02 11:09Distribution SiteLocky
lacosturera.es
86.109.170.198 (- Spain)
2017-10-02 11:09Distribution SiteLocky
staywithorchid.com
Web Commerce Communications Limi[...]119.110.108.6 (- Malaysia)
2017-09-30 17:55Botnet C&CLocky
185.159.128.119
185.159.128.119 (- Russian Federation)
2017-09-29 20:18Botnet C&CSage
mbfce24rgn65bx3g.kye1ap.net
PakNIC (Private) Limited (n/a)
2017-09-29 12:19Distribution SiteLocky
poemsan.info
Eranet International Limited (n/a)
2017-09-29 12:04Distribution SiteLocky
m-tensou.net
Tucows Domains Inc.202.218.252.73 (- Japan)
2017-09-29 12:04Distribution SiteLocky
sdr.co.nz
54.153.154.169 (- Australia)
2017-09-29 12:04Distribution SiteLocky
long-an.com.tw
HINET203.74.203.14 (- Taiwan)
2017-09-29 12:04Distribution SiteLocky
lp-usti.cz
REG-ZONER77.48.30.84 (- Czech Republic)
2017-09-29 12:04Distribution SiteLocky
suncoastot.com
eNom, Inc.98.124.252.176 (- United States)
2017-09-29 12:03Distribution SiteLocky
littleulearning.com
Network Solutions, LLC.66.36.163.208 (- United States)
2017-09-29 12:03Distribution SiteLocky
ip032.es
86.109.170.84 (- Spain)
2017-09-29 12:03Distribution SiteLocky
autoecolecarnot.com
Gandi SAS (n/a)
2017-09-29 12:03Distribution SiteLocky
bacota.es
185.18.198.88 (- Spain)
2017-09-29 12:03Distribution SiteLocky
associationlachaloupe.com
Gandi SAS (n/a)
2017-09-29 12:03Distribution SiteLocky
awholeblueworld.com
Tucows Domains Inc.66.36.173.215 (- United States)
2017-09-29 12:02Distribution SiteLocky
peep-call.com
RegistryGate GmbH103.40.11.156 (- Hong Kong)
2017-09-29 12:02Distribution SiteLocky
autoecolejeanluc.com
Gandi SAS178.20.66.207 (- France)
2017-09-29 12:02Distribution SiteLocky
xploramail.com
Soluciones Corporativas IP, SL (n/a)
2017-09-29 05:45Distribution SiteLocky
qxr33qxr.com
Tucows Domains Inc.67.210.102.240 (- United States)
2017-09-29 05:44Distribution SiteLocky
yamanashi-jyujin.jp
(n/a)
2017-09-29 05:43Distribution SiteLocky
ostiavolleyclub.it
WIDE-REG198.55.29.67 (- Turkey)
2017-09-29 05:43Distribution SiteLocky
glostrap.com
TLDs, LLC dba SRSplus34.200.181.247 (- United States)
2017-09-29 05:42Distribution SiteLocky
autoecoleautonome.com
Gandi SAS (n/a)
2017-09-29 05:35Distribution SiteLocky
henweekendsbirmingham.co.uk
Pulsant (Scotland) Ltd77.111.216.46 (- United Kingdom)
2017-09-29 05:35Distribution SiteLocky
homecarpetshopping.com
NetEarth One Inc. d/b/a NetEarth208.79.200.218 (- United States)
2017-09-29 05:35Distribution SiteLocky
jns.co.th
T.H.NIC Co., Ltd.203.146.43.65 (- Thailand)
2017-09-29 05:35Distribution SiteLocky
autoecolecarces.com
Gandi SAS193.227.248.241 (- France)
2017-09-29 05:34Distribution SiteLocky
paulcruse.com
Tucows Domains Inc.91.215.186.147 (- United Kingdom)
2017-09-29 05:34Distribution SiteLocky
lpdata.com
CSL Computer Service Langenbach [...]213.180.70.213 (- Sweden)
2017-09-29 05:34Distribution SiteLocky
richarddrakeconstruction.com
Tucows Domains Inc. (n/a)
2017-09-29 05:34Distribution SiteLocky
brandingforbuyout.com
GoDaddy.com, LLC23.236.62.147 (- United States)
2017-09-29 05:33Distribution SiteLocky
bit-chasers.com
eNom, Inc. (n/a)
2017-09-29 05:33Distribution SiteLocky
sherylbro.net
Eranet International Limited (n/a)
2017-09-28 05:48Distribution SiteLocky
consultingfranquean.com
OVH151.80.184.39 (- France)
2017-09-28 05:47Distribution SiteLocky
dic-astra.com
PT ARDH GLOBAL INDONESIA138.201.161.139 (- Germany)
2017-09-28 05:47Distribution SiteLocky
borcom.de
217.160.0.69 (- Germany)
2017-09-28 05:47Distribution SiteLocky
ashtontan.com
Tucows Domains Inc.103.6.198.208 (- Malaysia)
2017-09-28 05:47Distribution SiteLocky
asecontrids.com
CCI REG S.A. (n/a)
2017-09-28 05:46Distribution SiteLocky
poemsan.info
Eranet International Limited (n/a)
2017-09-28 05:46Distribution SiteLocky
gug-gummi.com
CPS-Datensysteme GmbH (n/a)
2017-09-28 05:46Distribution SiteLocky
bosphorustekneleri.com
REG2C.COM, INC.84.51.23.88 (- Turkey)
2017-09-28 05:46Distribution SiteLocky
avsaroglubisiklet.com
IHS Telekom, Inc.188.132.217.221 (- Turkey)
2017-09-27 20:15Botnet C&CLocky
91.223.88.50
91.223.88.50 (- Ukraine)
2017-09-27 16:16Distribution SiteLocky
hkcel.com
Web Commerce Communications Limi[...]202.181.132.166 (- Hong Kong)
2017-09-27 16:15Distribution SiteLocky
glostrap.com
TLDs, LLC dba SRSplus34.200.181.247 (- United States)
2017-09-27 16:15Distribution SiteLocky
gdrural.com.au
Enetica (n/a)
2017-09-27 16:14Distribution SiteLocky
hmbre.com
GoDaddy.com, LLC50.28.104.37 (- United States)
2017-09-27 16:14Distribution SiteLocky
freevillemusic.com
Tucows Domains Inc.66.84.8.235 (- United States)
2017-09-27 16:13Distribution SiteLocky
antwerpvillas.com
Ascio Technologies, Inc. Danmark[...]78.40.96.174 (- Belgium)
2017-09-27 16:13Distribution SiteLocky
asi-automazioni.com
Internet Domain Service BS Corp5.196.219.28 (- France)
2017-09-27 12:44Distribution SiteLocky
gilgroup.com
Network Solutions, LLC.216.177.130.203 (- United States)
2017-09-27 12:44Distribution SiteLocky
graficasicarpearanjuez.com
eNom, Inc.185.18.197.109 (- Spain)
2017-09-27 12:43Distribution SiteLocky
giraudnet.co.uk
XTPN Limited188.165.73.188 (- United Kingdom)
2017-09-27 12:43Distribution SiteLocky
apethorpevillage.co.uk
TUCOWS Inc t/a TUCOWS (n/a)
2017-09-27 12:43Distribution SiteLocky
galeona.com
Arsys Internet, S.L. d/b/a NICLI[...]212.89.16.142 (- Spain)
2017-09-27 12:43Distribution SiteLocky
granado.es
37.247.122.30 (- Spain)
2017-09-27 12:42Distribution SiteLocky
poemsan.info
Eranet International Limited (n/a)
2017-09-26 20:14Distribution SiteLocky
fiancevisacover.com
eNom, Inc.216.55.186.90 (- United States)
2017-09-26 20:14Distribution SiteLocky
financeforautos.com
GoDaddy.com, LLC (n/a)
2017-09-26 20:13Distribution SiteLocky
fianceevisa101.com
eNom, Inc.216.55.186.90 (- United States)
2017-09-26 20:13Distribution SiteLocky
geeks-online.de
(n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >