Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-24 11:19Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-24 11:19Distribution SiteLocky
soyyigit.com.tr
77.79.81.230 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
svcangel.com
GODADDY.COM, LLC107.180.44.152 (- United States)
2016-11-24 11:19Distribution SiteLocky
oyasinsaat.com.tr
94.73.148.80 (- Turkey)
2016-11-24 11:19Distribution SiteLocky
medicariel.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:19Distribution SiteLocky
pkgeneralcontracting.com
ENOM, INC.45.63.10.218 (- United States)
2016-11-24 11:19Distribution SiteLocky
plast-chem.com.pl
INFO-CAL185.208.164.124 (- Poland)
2016-11-24 11:19Distribution SiteLocky
staging.santana.eu
Combell NV79.174.131.204 (- Belgium)
2016-11-24 11:19Distribution SiteLocky
somersetautotints.co.uk
eNom, Inc.87.117.230.164 (- United Kingdom)
2016-11-24 11:19Distribution SiteLocky
prizor.net
ENOM, INC. (n/a)
2016-11-24 11:19Distribution SiteLocky
szhuangming.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.90.15.63 (- Hong Kong)
2016-11-24 11:18Distribution SiteLocky
uae4all.com
NAME.COM, INC.151.80.243.50 (- France)
2016-11-24 11:18Distribution SiteLocky
rek-style.ru
REGRU-RU37.140.192.177 (- Russian Federation)
2016-11-24 11:18Distribution SiteLocky
readtogether.org.uk
123-Reg Limited t/a 123-reg (n/a)
2016-11-24 11:18Distribution SiteLocky
riyuegu.net
BEIJING INNOVATIVE LINKAGE TECHN[...] (n/a)
2016-11-24 11:18Distribution SiteLocky
thoseads.com
GODADDY.COM, LLC199.79.54.237 (- United States)
2016-11-24 11:18Distribution SiteLocky
paultuttle.us
ENOM, INC.204.93.177.191 (- United States)
2016-11-24 11:18Distribution SiteLocky
muka.tnmrk.ru
REGRU-RU (n/a)
2016-11-24 11:18Distribution SiteLocky
turystyka.cal.pl
INFO-CAL91.185.191.163 (- Poland)
2016-11-24 11:11Distribution SiteLocky
markanltd.com
DOMAIN.COM, LLC109.232.217.151 (- Turkey)
2016-11-24 11:11Distribution SiteLocky
smolwow.ru
REGRU-RU (n/a)
2016-11-24 11:11Distribution SiteLocky
mospi.ru
REGTIME-RU91.221.37.14 (- Russian Federation)
2016-11-24 11:11Distribution SiteLocky
innsat.pl
Pro-Link147.135.201.64 (- France)
2016-11-24 11:11Distribution SiteLocky
adultmagstore.co.uk
123-Reg Limited t/a 123-reg185.2.4.92 (- Italy)
2016-11-24 11:10Distribution SiteLocky
sandiegoblindandshade.com
GODADDY.COM, LLC65.75.140.66 (- United States)
2016-11-24 11:10Distribution SiteLocky
hotloto.com
ENOM, INC.45.118.132.40 (- Singapore)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
michellemccarron.com
FASTDOMAIN, INC.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-11-24 11:10Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:10Distribution SiteLocky
mh500.com
TUCOWS DOMAINS INC.122.147.183.69 (- Taiwan)
2016-11-24 11:10Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:10Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:10Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-24 11:09Distribution SiteLocky
ruf.com.ar
(n/a)
2016-11-24 11:09Distribution SiteLocky
TruePublish.de
144.76.56.233 (- Germany)
2016-11-24 11:09Distribution SiteLocky
jlxzy.net
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
mediclo.pl
Michau Enterprises Ltd. (n/a)
2016-11-24 11:09Distribution SiteLocky
derekglum.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-24 11:09Distribution SiteLocky
safety-speed.ru
NETHOUSE-RU77.222.57.253 (- Russian Federation)
2016-11-24 11:09Distribution SiteLocky
trinechina.com
HICHINA ZHICHENG TECHNOLOGY LTD.139.129.55.49 (- China)
2016-11-24 11:09Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-24 11:09Distribution SiteLocky
naarndonau.at
5.9.62.69 (- Germany)
2016-11-24 11:09Distribution SiteLocky
istanbulsoft.com.tr
93.187.206.11 (- Turkey)
2016-11-24 11:08Distribution SiteLocky
stroybal.ru
REGRU-RU (n/a)
2016-11-24 11:08Distribution SiteLocky
musicphilicwinds.org
OnlineNIC Inc.58.82.193.248 (- Hong Kong)
2016-11-24 11:08Distribution SiteLocky
hupsoft.com
GODADDY.COM, LLC184.168.221.53 (- United States)
2016-11-24 11:08Distribution SiteLocky
izmirisgb.com
FBS INC.195.22.26.248 (- Portugal)
2016-11-24 11:08Distribution SiteLocky
julian-g.ro
Telekom Romania Communications S[...]86.35.15.70 (- Romania)
2016-11-24 11:08Distribution SiteLocky
muamusic.com
SHANGHAI BEST ORAY INFORMATION S[...] (n/a)
2016-11-24 11:08Distribution SiteLocky
stazilivio.it
TRINATEL-REG5.134.127.240 (- Italy)
2016-11-24 11:08Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:08Distribution SiteLocky
mogadk.ru
R01-RU81.177.135.132 (- Russian Federation)
2016-11-24 11:08Distribution SiteLocky
reaga.cz
REG-INTERNET-CZ93.153.74.105 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
maticelesnicka.cz
REG-IGNUM81.0.212.3 (- Czech Republic)
2016-11-24 11:08Distribution SiteLocky
immobilienbegleitung.de
5.9.189.68 (- Germany)
2016-11-24 11:08Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:08Distribution SiteLocky
myhtar.ru
R01-RU (n/a)
2016-11-24 11:07Distribution SiteLocky
rcabaj.com.pl
home.pl S.A.79.96.33.252 (- Poland)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
satiliksanat.com
ALANTRON BILISIM LTD STI.95.173.182.184 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
kembarastation.com
TUCOWS DOMAINS INC. (n/a)
2016-11-24 11:07Distribution SiteLocky
hud3.net
MAT BAO TRADING & SERVICE COMPAN[...] (n/a)
2016-11-24 11:07Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
iaam.com.br
23.236.62.147 (- United States)
2016-11-24 11:07Distribution SiteLocky
unykmodels.com
ACENS TECHNOLOGIES, S.L.U.143.95.74.249 (- United States)
2016-11-24 11:07Distribution SiteLocky
statikwerk.de
83.141.34.141 (- Germany)
2016-11-24 11:07Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:07Distribution SiteLocky
mtntelekom.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.148.217 (- Turkey)
2016-11-24 11:07Distribution SiteLocky
mschroll.de
212.227.137.55 (- Germany)
2016-11-24 11:07Distribution SiteLocky
muzica-evenimente.ro
ICI - ROTLD85.204.19.232 (- Romania)
2016-11-24 11:07Distribution SiteLocky
stivyiseum.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-24 11:06Distribution SiteLocky
structuralstonellc.com
WILD WEST DOMAINS, LLC192.185.225.141 (- United States)
2016-11-24 11:06Distribution SiteLocky
jingaiwang.com
BIZCN.COM, INC.104.140.48.24 (- United States)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-24 11:06Distribution SiteLocky
amilvenus.com
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
lacosanostra.co
NAME.COM LLC (n/a)
2016-11-24 11:06Distribution SiteLocky
www.limpotools.com
REGISTER.IT SPA89.46.106.71 (- Italy)
2016-11-24 11:06Distribution SiteLocky
stellaar.com
NETWORK SOLUTIONS, LLC.184.168.221.42 (- United States)
2016-11-24 11:06Distribution SiteLocky
jrockish.bravepages.com
REGISTER.COM, INC.66.219.202.10 (- United States)
2016-11-24 11:06Distribution SiteLocky
izmirisgb.com
FBS INC.195.22.26.248 (- Portugal)
2016-11-24 11:06Distribution SiteLocky
schmidtbauer.at
5.9.25.251 (- Germany)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 11:06Distribution SiteLocky
hqseconsulting.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-11-24 11:06Distribution SiteLocky
crylinen.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-24 11:06Distribution SiteLocky
sexexpo.ro
ICI - ROTLD (n/a)
2016-11-24 11:06Distribution SiteLocky
poralthrew.net
KEY-SYSTEMS GMBH (n/a)
2016-11-24 09:48Payment SiteCerber
vyohacxzoue32vvk.p9su2u.top
Eranet International Limited (n/a)
2016-11-24 05:30Payment SiteCerber
vyohacxzoue32vvk.d7h6yx.top
Eranet International Limited (n/a)
2016-11-24 02:14Payment SiteCerber
ahuqfrqk54v3vnzj.bds4sn.top
Eranet International Limited (n/a)
2016-11-24 00:51Payment SiteCerber
vyohacxzoue32vvk.ac7zvz.top
Eranet International Limited (n/a)
2016-11-23 21:55Payment SiteCerber
xrhwryizf5mui7a5.vgxcci.top
Eranet International Limited (n/a)
2016-11-23 20:07Botnet C&CLocky
91.211.119.98
91.211.119.98 (- Ukraine)
2016-11-23 19:43Payment SiteCerber
ahuqfrqk54v3vnzj.4h16v3.top
Eranet International Limited (n/a)
2016-11-23 19:14Botnet C&CLocky
95.46.114.205
95.46.114.205 (- Russian Federation)
2016-11-23 18:59Distribution SiteLocky
mdk-wear.ru
REGTIME-RU141.8.193.216 (- Russian Federation)
2016-11-23 18:59Distribution SiteLocky
nicputeec.com
REGIONAL NETWORK INFORMATION CEN[...]109.70.26.37 (- Russian Federation) +1 A record(s) 194.85.61.76 (AS48287, - Russian Federation)
2016-11-23 18:59Distribution SiteLocky
obsidian.cl
67.20.76.146 (- United States)
2016-11-23 18:59Distribution SiteLocky
golden-bereg.ru
RU-CENTER-RU (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >