Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-28 10:25Distribution SiteLocky
maximumauction.com
GODADDY.COM, LLC166.62.125.116 (- United States)
2016-11-28 10:24Distribution SiteLocky
sam31.ru
R01-RU (n/a)
2016-11-28 10:24Distribution SiteLocky
mekka.com.br
187.17.111.102 (- Brazil)
2016-11-28 10:24Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:24Distribution SiteLocky
loraycomunicaciones.com.ar
198.50.188.17 (- Argentina)
2016-11-28 10:24Distribution SiteLocky
sinklinga.com
KEY-SYSTEMS GMBHn/a
2016-11-28 10:24Distribution SiteLocky
mainlandfishfarm.com
GODADDY.COM, LLC54.251.115.0 (- Singapore)
2016-11-28 10:24Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:24Distribution SiteLocky
moymir58.ru
REGTIME-RU (n/a)
2016-11-28 10:24Distribution SiteLocky
TruePublish.de
144.76.56.233 (- Germany)
2016-11-28 10:24Distribution SiteLocky
ruf.com.ar
(n/a)
2016-11-28 10:24Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS4766, - United States)
2016-11-28 10:23Distribution SiteLocky
kwlbroadcast.com
CV. JOGJACAMP114.57.247.170 (- Indonesia)
2016-11-28 10:23Distribution SiteLocky
momsonlymall.com
TUCOWS DOMAINS INC. (n/a)
2016-11-28 10:23Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:23Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS4766, - United States)
2016-11-28 10:23Distribution SiteLocky
modepiraten.com
CRONON AG81.169.145.68 (- Germany)
2016-11-28 10:23Distribution SiteLocky
lontion.net
WEST263 INTERNATIONAL LIMITED107.172.183.203 (- United States)
2016-11-28 10:23Distribution SiteLocky
mimatefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.99.13.70 (- Canada)
2016-11-28 10:23Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:23Distribution SiteLocky
firstscog.net
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS4766, - United States)
2016-11-28 10:23Distribution SiteLocky
irenta.lt
UAB "Interneto vizija"79.98.28.19 (- Lithuania)
2016-11-28 10:23Distribution SiteLocky
milliner.ca
Tucows.com Co. (n/a)
2016-11-28 10:22Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:22Distribution SiteLocky
misaho.com.ar
158.69.98.141 (- Canada)
2016-11-28 10:22Distribution SiteLocky
mizhibuluo.com
CHENGDU WEST DIMENSION DIGITAL T[...]104.28.10.243 (- United States) +1 A record(s) 104.28.11.243 (AS13335, - United States)
2016-11-28 10:22Distribution SiteLocky
sinklinga.com
KEY-SYSTEMS GMBHn/a
2016-11-28 10:22Distribution SiteLocky
taotao500.cn
WEST263 INTERNATIONAL LIMITED180.101.73.138 (- China)
2016-11-28 10:22Distribution SiteLocky
mib.tn
..........3s Globalnet137.74.170.8 (- France)
2016-11-28 10:22Distribution SiteLocky
wavearni.com
WEB COMMERCE COMMUNICATIONS LIMI[...]n/a
2016-11-28 10:22Distribution SiteLocky
kuszowka.pl
nazwa.pl sp. z o.o.91.239.66.134 (- Poland)
2016-11-28 10:21Distribution SiteLocky
jawar.eu
nazwa.pl sp. z o.o. (n/a)
2016-11-28 10:21Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-28 10:21Distribution SiteLocky
isidore.be
AXC185.182.59.5 (- Netherlands)
2016-11-28 10:21Distribution SiteLocky
innogenap.com
TUCOWS DOMAINS INC.103.6.196.196 (- Malaysia)
2016-11-28 10:21Distribution SiteLocky
huishow.net
BIGROCK SOLUTIONS LIMITED (n/a)
2016-11-28 10:21Distribution SiteLocky
cadgewigan.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-28 10:21Distribution SiteLocky
dodowiz.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-28 10:21Distribution SiteLocky
holzschnitzereibinder.de
(n/a)
2016-11-27 16:57Payment SiteCerber
ffoqr3ug7m726zou.bpuhab.top
Eranet International Limited (n/a)
2016-11-27 14:12Payment SiteCerber
avsxrcoq2q5fgrw2.zi842m.bid
Eranet International Limited (n/a)
2016-11-27 11:25Payment SiteCerber
avsxrcoq2q5fgrw2.vofy7f.top
Eranet International Limited (n/a)
2016-11-26 21:13Payment SiteCerber
ffoqr3ug7m726zou.b4abvx.top
Eranet International Limited (n/a)
2016-11-26 12:16Payment SiteCerber
lfdachijzuwx4bc4.af38vz.top
Eranet International Limited (n/a)
2016-11-26 11:20Payment SiteCerber
xrhwryizf5mui7a5.j4cser.bid
Eranet International Limited (n/a)
2016-11-26 09:17Payment SiteTorrentLocker
4w5wihkwyhsav2ha.payfactor.at
(n/a)
2016-11-26 01:33Payment SiteCerber
ffoqr3ug7m726zou.wx2n44.top
Eranet International Limited (n/a)
2016-11-25 22:38Payment SiteCerber
vyohacxzoue32vvk.w22p3v.top
Eranet International Limited (n/a)
2016-11-25 21:11Payment SiteCerber
vyohacxzoue32vvk.ibar8s.top
Eranet International Limited (n/a)
2016-11-25 20:56Payment SiteCerber
vyohacxzoue32vvk.dks71o.bid
Eranet International Limited (n/a)
2016-11-25 16:11Payment SiteCerber
vyohacxzoue32vvk.ean5e7.top
Eranet International Limited (n/a)
2016-11-25 15:48Payment SiteCerber
vyohacxzoue32vvk.xy2rlg.bid
Eranet International Limited (n/a)
2016-11-25 13:48Distribution SiteLocky
tingfenglou.orgfree.com
NETEARTH ONE INC. D/B/A NETEARTH173.208.195.156 (- United States)
2016-11-25 13:48Distribution SiteLocky
songpulatex.com
BEIJING INNOVATIVE LINKAGE TECHN[...]104.232.105.87 (- United States)
2016-11-25 13:48Distribution SiteLocky
stomatolog-implant.ro
Claus Web SRL (n/a)
2016-11-25 13:48Distribution SiteLocky
theoneworld.in
Name.com LLC (R65-AFIN)72.55.174.168 (- Canada)
2016-11-25 13:48Distribution SiteLocky
pesaroeventi.it
OVH-REG (n/a)
2016-11-25 13:48Distribution SiteLocky
unimarket.ch
switchplus AG193.246.38.197 (- Switzerland)
2016-11-25 13:48Distribution SiteLocky
sineria.com
KEY-SYSTEMS GMBH91.134.171.210 (- Netherlands)
2016-11-25 13:48Distribution SiteLocky
trebleimp.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.44.204 (- Thailand)
2016-11-25 13:48Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-25 13:47Distribution SiteLocky
sallymills.com
PROMO PEOPLE, INC.116.90.62.38 (- Australia)
2016-11-25 13:47Distribution SiteLocky
tarasarl.com
GODADDY.COM, LLC104.27.132.97 (- United States) +1 A record(s) 104.27.133.97 (AS13335, - United States)
2016-11-25 13:47Distribution SiteLocky
shydnt.com
BIZCN.COM, INC. (n/a)
2016-11-25 13:47Distribution SiteLocky
reginaautoauction.com
GODADDY.COM, LLC192.124.249.12 (- United States)
2016-11-25 13:47Distribution SiteLocky
nxarab.net
DOMAIN.COM, LLC (n/a)
2016-11-25 13:47Distribution SiteLocky
sayvir.com
OVH (n/a)
2016-11-25 13:47Distribution SiteLocky
tyfastener.com
GODADDY.COM, LLC47.89.178.243 (- United States)
2016-11-25 13:47Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-25 13:47Distribution SiteLocky
sunekitty.com
TUCOWS DOMAINS INC.219.118.65.20 (- Japan)
2016-11-25 13:47Distribution SiteLocky
stevetoulch.com
GODADDY.COM, LLC104.152.168.26 (- Canada)
2016-11-25 13:46Distribution SiteLocky
shenzhensh.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-25 13:46Distribution SiteLocky
sabinemerz.nl
Nouzelle B.V.87.119.194.135 (- Netherlands)
2016-11-25 13:46Distribution SiteLocky
sujiaotuoban.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.218 (- China)
2016-11-25 13:46Distribution SiteLocky
satherm.pt
80.172.235.175 (- Portugal)
2016-11-25 13:46Distribution SiteLocky
portalkerjaya.com
NAME.COM, INC.198.54.117.197 (- United States) +3 A record(s) 198.54.117.198 (AS22612, - United States)
198.54.117.199 (AS22612, - United States)
198.54.117.200 (AS22612, - United States)
2016-11-25 13:46Distribution SiteLocky
tolga-tosun.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-11-25 13:46Distribution SiteLocky
pornolartv.net
GODADDY.COM, LLC (n/a)
2016-11-25 13:46Distribution SiteLocky
pulse-tv.net
DYNADOT, LLC89.248.162.181 (- Seychelles)
2016-11-25 13:46Distribution SiteLocky
puttechnologies.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.186.242.166 (- United States)
2016-11-25 13:46Distribution SiteLocky
setoxy.com
P.A. VIET NAM COMPANY LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS45544, - United States)
2016-11-25 13:46Distribution SiteLocky
asrcargo.ru
R01-RU91.219.194.19 (- Russian Federation)
2016-11-25 13:46Distribution SiteLocky
sinmotor.com
ENOM, INC.122.155.166.164 (- Thailand)
2016-11-25 13:46Distribution SiteLocky
sp-tulun.ru
REGRU-RU213.159.215.224 (- Russian Federation)
2016-11-25 13:46Distribution SiteLocky
vanaken.nu
Hosting Concepts81.18.172.55 (- Netherlands)
2016-11-25 13:45Distribution SiteLocky
saintsraw.com
GODADDY.COM, LLC160.153.133.165 (- United States)
2016-11-25 13:45Distribution SiteLocky
square100.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-25 13:45Distribution SiteLocky
richcity.net
DOMAIN.COM, LLC (n/a)
2016-11-25 13:45Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...] (n/a)
2016-11-25 13:45Distribution SiteLocky
sreekrishnatemple.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-25 13:45Distribution SiteLocky
soonmarketing.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-25 13:45Distribution SiteLocky
sipho.es
86.109.162.16 (- Spain)
2016-11-25 13:45Distribution SiteLocky
thoraxcenter.ru
AGAVA-RU31.31.196.106 (- Russian Federation)
2016-11-25 13:44Distribution SiteLocky
ruwechat.ru
REGRU-RU (n/a)
2016-11-25 13:44Distribution SiteLocky
swkitchens.com.au
Web Address Registration162.144.126.93 (- United States)
2016-11-25 13:44Distribution SiteLocky
ruchengfcw.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-25 13:38Payment SiteCerber
vyohacxzoue32vvk.zz3w5l.bid
Eranet International Limited (n/a)
2016-11-25 13:19Payment SiteCerber
vyohacxzoue32vvk.1m47ka.bid
Eranet International Limited (n/a)
2016-11-25 10:45Distribution SiteLocky
semeystvo.com.ua
185.68.16.177 (- Ukraine)
2016-11-25 10:45Distribution SiteLocky
prongai.com
ONLINENIC, INC.59.152.207.106 (- Hong Kong)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >