Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-23 18:59Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-23 18:58Distribution SiteLocky
masterimob.ro
ICI - ROTLD (n/a)
2016-11-23 18:58Distribution SiteLocky
muricreklamcilik.com
FBS INC.94.73.149.48 (- Turkey)
2016-11-23 18:58Distribution SiteLocky
noisecontrols.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]35.169.58.188 (- United States) +1 A record(s) 54.208.77.124 (AS8100, - United States)
2016-11-23 18:58Distribution SiteLocky
kolumbia.free.bg
Free - St. Petrova ET94.130.71.117 (- Germany)
2016-11-23 18:57Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:57Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:57Distribution SiteLocky
dhmodel.cz
REG-ACTIVE2493.185.104.27 (- Czech Republic)
2016-11-23 18:57Distribution SiteLocky
interprofil.no
(n/a)
2016-11-23 18:57Distribution SiteLocky
gremr.ma
GENIOUS COMMUNICATION41.77.113.173 (- Morocco)
2016-11-23 18:57Distribution SiteLocky
kleansys.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]67.222.148.212 (- United States)
2016-11-23 18:56Distribution SiteLocky
hightradingfrequency.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-11-23 18:56Distribution SiteLocky
gadgetdealz.net
GODADDY.COM, LLC (n/a)
2016-11-23 18:56Distribution SiteLocky
gomuskegon.mobi
GoDaddy.com, LLC (n/a)
2016-11-23 18:56Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:56Distribution SiteLocky
gold-or.ca
Webnames.ca Inc.46.30.215.240 (- Denmark)
2016-11-23 18:56Distribution SiteLocky
orthoskin.com
CRONON AG193.141.3.66 (- Germany)
2016-11-23 18:55Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:54Distribution SiteLocky
greentic.univcasa.ma
MEDI TELECOM196.200.165.11 (- Morocco)
2016-11-23 18:54Distribution SiteLocky
musicrecruiting.com
GODADDY.COM, LLC37.60.251.36 (- United States)
2016-11-23 18:54Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:54Distribution SiteLocky
gpsfiles.nl
TransIP BV185.10.48.165 (- Netherlands)
2016-11-23 18:53Distribution SiteLocky
heatsavingsystems.com
GODADDY.COM, LLC90.156.201.100 (- Russian Federation) +3 A record(s) 90.156.201.111 (AS25532, - Russian Federation)
90.156.201.116 (AS25532, - Russian Federation)
90.156.201.59 (AS25532, - Russian Federation)
2016-11-23 18:53Distribution SiteLocky
panificadoraavenida.com
MARCARIA.COM, INTERNATIONAL, INC[...] (n/a)
2016-11-23 18:53Distribution SiteLocky
rentalpark.com.ar
200.80.52.117 (- Argentina)
2016-11-23 18:53Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:53Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:53Distribution SiteLocky
iwebsdns.com
DNC HOLDINGS, INC.74.117.221.144 (- Cayman Islands)
2016-11-23 18:52Distribution SiteLocky
markscheffel.de
212.227.228.103 (- Germany)
2016-11-23 18:52Distribution SiteLocky
peruincoming.com
ENOM, INC.198.54.117.197 (- United States) +3 A record(s) 198.54.117.198 (AS22612, - United States)
198.54.117.199 (AS22612, - United States)
198.54.117.200 (AS22612, - United States)
2016-11-23 18:52Distribution SiteLocky
frivill.hu
91.82.226.140 (- Hungary)
2016-11-23 18:52Distribution SiteLocky
fu-k.jp
61.208.203.245 (- Japan)
2016-11-23 18:52Distribution SiteLocky
4006600592.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-11-23 18:52Distribution SiteLocky
lecitron.org
Key-Systems GmbH (n/a)
2016-11-23 18:52Distribution SiteLocky
materlux.ru
RU-CENTER-RU176.57.210.37 (- Russian Federation)
2016-11-23 18:52Distribution SiteLocky
meshok.com.ua
(n/a)
2016-11-23 18:51Distribution SiteLocky
gpstrackerbali.com
CV. JOGJACAMP219.83.68.90 (- Indonesia)
2016-11-23 18:51Distribution SiteLocky
gigabothosting.com
ENOM, INC.197.189.218.2 (- South Africa)
2016-11-23 18:51Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC23.236.62.147 (- United States)
2016-11-23 18:51Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:51Distribution SiteLocky
highlandsolar.ca
Promo People Inc.69.90.160.250 (- Canada)
2016-11-23 18:50Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:50Distribution SiteLocky
ivocal.fr
OVH194.165.49.91 (- France)
2016-11-23 18:50Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:50Distribution SiteLocky
vikingradom.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:50Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:50Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:49Distribution SiteLocky
h-miyoshi.ed.jp
219.94.128.187 (- Japan)
2016-11-23 18:49Distribution SiteLocky
islamhizmeti.com
FBS INC. (n/a)
2016-11-23 18:49Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:49Distribution SiteLocky
grafian.pl
Consulting Service Sp. z o.o. (n/a)
2016-11-23 18:48Distribution SiteLocky
janzwolinski.freehost.pl
Consulting Service Sp. z o.o.195.114.0.86 (- Poland)
2016-11-23 18:48Distribution SiteLocky
paddamar.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:48Distribution SiteLocky
naruby.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-23 18:48Distribution SiteLocky
helfter.fr
OVH213.186.33.40 (- France)
2016-11-23 18:48Distribution SiteLocky
joelbodhi.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 18:47Distribution SiteLocky
giochasach.com
ENOM, INC.123.30.128.101 (- Vietnam)
2016-11-23 18:46Distribution SiteLocky
chuzhang.net
CHENGDU WEST DIMENSION DIGITAL T[...]211.149.238.102 (- China)
2016-11-23 18:46Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:45Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"79.98.26.175 (- Lithuania)
2016-11-23 18:45Distribution SiteLocky
orantpamir.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
ooomaksim.ru
R01-RU195.161.114.196 (- Russian Federation)
2016-11-23 18:44Distribution SiteLocky
leliunion.net
KEY-SYSTEMS GMBH (n/a)
2016-11-23 18:44Distribution SiteLocky
oimeferio.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-23 18:44Distribution SiteLocky
asrcargo.ru
R01-RU91.219.194.19 (- Russian Federation)
2016-11-23 15:55Distribution SiteLocky
p2pbikini.com
MAT BAO TRADING & SERVICE COMPAN[...] (n/a)
2016-11-23 15:54Distribution SiteLocky
normalizemusic.com
REGISTER.COM, INC.66.84.59.98 (- United States)
2016-11-23 15:54Distribution SiteLocky
rhodemlogic.com
GABIA, INC.218.232.104.232 (- Korea)
2016-11-23 15:54Distribution SiteLocky
power4speed.com
GODADDY.COM, LLC216.131.90.178 (- United States)
2016-11-23 15:53Distribution SiteLocky
premagro.ro
ICI - ROTLD176.223.208.18 (- Europe)
2016-11-23 15:53Distribution SiteLocky
nabila.co.id
118.98.75.70 (- Indonesia)
2016-11-23 15:52Distribution SiteLocky
nnptrading.com
DOMAIN.COM, LLC203.151.233.116 (- Thailand)
2016-11-23 15:52Distribution SiteLocky
raivel.pt
188.93.230.41 (- Portugal)
2016-11-23 15:51Distribution SiteLocky
rgbserver.be
AXC5.10.105.36 (- United Kingdom)
2016-11-23 15:50Distribution SiteLocky
panoramicprocurement.net
GODADDY.COM, LLC (n/a)
2016-11-23 15:50Distribution SiteLocky
pedullaelectric.com
TUCOWS DOMAINS INC.146.66.71.203 (- United States)
2016-11-23 15:50Distribution SiteLocky
rafaelleon.es
89.248.106.86 (- Spain)
2016-11-23 15:49Distribution SiteLocky
regionalclaimsrecovery.com
NETWORK SOLUTIONS, LLC.76.12.91.233 (- United States)
2016-11-23 15:49Distribution SiteLocky
noosnegah.com
REALTIME REGISTER BV (n/a)
2016-11-23 15:48Distribution SiteLocky
pakcek.com
ENOM, INC.208.86.254.250 (- United States)
2016-11-23 15:47Distribution SiteLocky
nkfyfs.cn
郑州世纪创联电子科技[...] (n/a)
2016-11-23 15:47Distribution SiteLocky
padcha.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-23 15:47Distribution SiteLocky
pietroconfalonieri.com
TUCOWS DOMAINS INC.93.186.251.182 (- Italy)
2016-11-23 15:46Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-11-23 15:45Distribution SiteLocky
p-sysnet.de
217.160.0.199 (- Germany)
2016-11-23 15:45Distribution SiteLocky
platinumrainbow.com
ENOM, INC. (n/a)
2016-11-23 10:49Distribution SiteLocky
jinxlaze.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-23 10:49Distribution SiteLocky
prayerarchive.com
WILD WEST DOMAINS, LLC50.115.230.116 (- United States)
2016-11-23 10:49Distribution SiteLocky
nicehdwall.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-23 10:48Distribution SiteLocky
pineysprat.com
KEY-SYSTEMS GMBH (n/a)
2016-11-23 10:48Distribution SiteLocky
pratecnet.org
eNom, Inc.66.7.218.232 (- United States)
2016-11-23 10:48Distribution SiteLocky
vedicmotet.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:48Distribution SiteLocky
obtenloya.com
GODADDY.COM, LLC23.254.240.58 (- United States)
2016-11-23 10:48Distribution SiteLocky
pesci.ro
ICI - ROTLD (n/a)
2016-11-23 10:48Distribution SiteLocky
ptworkdomain.com
DOMAINPEOPLE, INC. (n/a)
2016-11-23 10:47Distribution SiteLocky
qdweierya.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-23 10:47Distribution SiteLocky
pensionwoehler.de
91.233.84.194 (- Germany)
2016-11-23 10:47Distribution SiteLocky
gurlfanam.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-23 10:47Distribution SiteLocky
nightpeople.co.il
(n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >