Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-22 12:42Distribution SiteLocky
xa12580.com
HICHINA ZHICHENG TECHNOLOGY LTD.47.93.120.117 (- China)
2016-11-22 12:42Distribution SiteLocky
verdianthy.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-22 12:42Distribution SiteLocky
luanasahian.ro
Romarg SRL (n/a)
2016-11-22 12:42Distribution SiteLocky
mckains.net
GODADDY.COM, LLC (n/a)
2016-11-22 12:42Distribution SiteLocky
huduanjichuang.com
BIZCN.COM, INC.23.104.231.181 (- United States)
2016-11-22 12:42Distribution SiteLocky
warisstyle.com
JIANGSU BANGNING SCIENCE & TECHN[...]104.27.130.9 (- United States) +1 A record(s) 104.27.131.9 (AS13335, - United States)
2016-11-22 12:41Distribution SiteLocky
gumorca.com
NEUBOX INTERNET SA DE CV199.191.50.140 (- Virgin Islands)
2016-11-22 12:41Distribution SiteLocky
hjertearken.dk
(n/a)
2016-11-22 12:41Distribution SiteLocky
marvicedo.com
1&1 INTERNET SE89.187.85.10 (- United Kingdom)
2016-11-22 12:41Distribution SiteLocky
dmsoinfo.com
ENOM, INC.198.38.82.169 (- United States)
2016-11-22 12:41Distribution SiteLocky
kuponik.eu
Michau Enterprises Limited136.243.50.2 (- Germany)
2016-11-22 12:41Distribution SiteLocky
robertocostama.com
ENOM, INC.186.202.153.91 (- Brazil)
2016-11-22 12:41Distribution SiteLocky
newautolatino.com
WILD WEST DOMAINS, LLC204.11.56.48 (- Virgin Islands)
2016-11-22 12:41Distribution SiteLocky
hancebile.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:40Distribution SiteLocky
interdean.hu
95.131.66.24 (- United Kingdom)
2016-11-22 12:40Distribution SiteLocky
lifanpower.pl
nazwa.pl sp. z o.o.94.130.51.151 (- Germany)
2016-11-22 12:40Distribution SiteLocky
lp511.com
HICHINA ZHICHENG TECHNOLOGY LTD.216.127.168.220 (- United States)
2016-11-22 12:40Distribution SiteLocky
ulmustway.com
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS33070, - United States)
2016-11-22 12:39Distribution SiteLocky
microsupport.net
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-11-22 12:39Distribution SiteLocky
reoilmaya.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 12:39Distribution SiteLocky
mybankofgold.com
INSTRA CORPORATION PTY, LTD.213.136.88.141 (- Germany)
2016-11-22 12:39Distribution SiteLocky
rsahosting.com
ENOM, INC.143.95.246.177 (- United States)
2016-11-22 12:38Distribution SiteLocky
hancebile.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:38Distribution SiteLocky
convertus.com
GODADDY.COM, LLC216.129.207.43 (- Canada)
2016-11-22 12:38Distribution SiteLocky
gtodo.com.ar
200.110.156.67 (- Argentina)
2016-11-22 12:38Distribution SiteLocky
thegioitructuyen.org
P.A. Viet Nam Company Limited103.7.41.15 (- Vietnam)
2016-11-22 12:38Distribution SiteLocky
mcmustard.com
REGISTER.COM, INC.192.124.249.7 (- United States)
2016-11-22 12:38Distribution SiteLocky
maxifitness.ru
REGRU-RU91.218.229.10 (- Russian Federation)
2016-11-22 12:38Distribution SiteLocky
facerecognition.com.ba
195.222.33.161 (- Bosnia and Herzegovina)
2016-11-22 12:37Distribution SiteLocky
jazz.kvalitne.cz
REG-STABLE185.64.219.5 (- Czech Republic)
2016-11-22 12:37Distribution SiteLocky
dtinsani.com
ONLINENIC, INC.175.103.55.72 (- Indonesia)
2016-11-22 12:37Distribution SiteLocky
sadhekoala.com
KEY-SYSTEMS GMBH (n/a)
2016-11-22 12:36Distribution SiteLocky
sbdma.com
ENOM, INC.187.45.240.4 (- Brazil)
2016-11-22 12:36Distribution SiteLocky
gxaiq.com
CHENGDU WEST DIMENSION DIGITAL T[...]219.234.6.204 (- China)
2016-11-22 12:36Distribution SiteLocky
natalija.ru
R01-RU217.112.42.86 (- United Kingdom)
2016-11-22 12:36Distribution SiteLocky
mooymedia.nl
Fast DRS188.227.200.134 (- Netherlands)
2016-11-22 12:35Distribution SiteLocky
kabele.ru
RU-CENTER-RU195.28.183.183 (- Ukraine)
2016-11-22 12:35Distribution SiteLocky
i12.ir
185.94.97.250 (- Iran)
2016-11-22 12:35Distribution SiteLocky
melzer-casting.de
(n/a)
2016-11-22 12:35Distribution SiteLocky
illinoisnavhda.org
BRANDON GRAY INTERNET SERVICES I[...]198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-11-22 12:35Distribution SiteLocky
bursacicekmagazasi.com
REG2C.COM, INC.188.124.24.242 (- Turkey)
2016-11-22 12:35Distribution SiteLocky
kstm.or.th
T.H.NIC Co., Ltd. (n/a)
2016-11-22 12:35Distribution SiteLocky
poltec.com.au
Web Address Registration (n/a)
2016-11-22 12:34Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-11-22 12:34Distribution SiteLocky
pattumalamatha.com
GODADDY.COM, LLC (n/a)
2016-11-22 12:34Distribution SiteLocky
touroflimassol.com
1&1 INTERNET SE74.208.236.161 (- United States)
2016-11-22 12:34Distribution SiteLocky
megalingeriemall.com
GODADDY.COM, LLC (n/a)
2016-11-22 12:34Distribution SiteLocky
wbakerpsych.com
ENOM, INC. (n/a)
2016-11-22 12:34Distribution SiteLocky
sdwsgs.com
HICHINA ZHICHENG TECHNOLOGY LTD.107.148.64.247 (- United States)
2016-11-22 12:34Distribution SiteLocky
adoptshawm.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 12:33Distribution SiteLocky
lumitech.ro
ICI - ROTLD188.241.152.101 (- Romania)
2016-11-22 12:33Distribution SiteLocky
snehil.com
GODADDY.COM, LLC (n/a)
2016-11-22 12:33Distribution SiteLocky
woodmode-eg.com
DOMAIN.COM, LLC69.30.221.122 (- United States)
2016-11-22 12:33Distribution SiteLocky
korbastudio.com
NETART SP Z O.O185.204.218.214 (- Poland)
2016-11-22 12:33Distribution SiteLocky
campossa.com
EURODNS S.A83.217.74.164 (- Belgium)
2016-11-22 12:32Distribution SiteLocky
gto-cro.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]104.27.168.253 (- United States) +1 A record(s) 104.27.169.253 (AS13335, - United States)
2016-11-22 12:32Distribution SiteLocky
remixsarkilar.com
NAME.COM, INC.108.61.19.11 (- United States)
2016-11-22 12:32Distribution SiteLocky
jkshea.com
NETEARTH ONE INC. D/B/A NETEARTH (n/a)
2016-11-22 12:32Distribution SiteLocky
phaseiv.org
Network Solutions, LLC198.71.232.3 (- United States)
2016-11-22 12:32Distribution SiteLocky
maroeg.com
WILD WEST DOMAINS, LLC (n/a)
2016-11-22 12:31Distribution SiteLocky
irandivinggroup.com
TUCOWS DOMAINS INC.78.129.132.132 (- United Kingdom)
2016-11-22 12:30Distribution SiteLocky
csplane.com
GODADDY.COM, LLC72.55.186.12 (- Canada)
2016-11-22 12:30Distribution SiteLocky
touroflimassol.com
1&1 INTERNET SE74.208.236.161 (- United States)
2016-11-22 12:30Distribution SiteLocky
vedexpert.com
REGIONAL NETWORK INFORMATION CEN[...]78.46.52.118 (- Germany)
2016-11-22 12:30Distribution SiteLocky
whatsapphd.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-22 12:30Distribution SiteLocky
oualili.org
FastDomain Inc. (n/a)
2016-11-22 12:29Distribution SiteLocky
rndled.com
HICHINA ZHICHENG TECHNOLOGY LTD.156.235.232.79 (- United States)
2016-11-22 12:29Distribution SiteLocky
ulmustway.com
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS33070, - United States)
2016-11-22 12:29Distribution SiteLocky
valpit.ru
RU-CENTER-RU109.70.26.37 (- Russian Federation) +1 A record(s) 194.85.61.76 (AS203051, - Russian Federation)
2016-11-22 08:31Distribution SiteLocky
langzhong8.com
CHENGDU WEST DIMENSION DIGITAL T[...]104.217.115.98 (- United States)
2016-11-22 08:31Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:30Distribution SiteLocky
intensivo.nl
AXC (n/a)
2016-11-22 08:30Distribution SiteLocky
hubis.ir
88.99.160.208 (- Germany)
2016-11-22 08:30Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:30Distribution SiteLocky
hosimin.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-22 08:30Distribution SiteLocky
tupsorva.net
KEY-SYSTEMS GMBH (n/a)
2016-11-22 08:30Distribution SiteLocky
mice.co.th
T.H.NIC Co., Ltd.119.59.104.33 (- Thailand)
2016-11-22 08:30Distribution SiteLocky
lijschool.com
GABIA, INC.183.111.174.19 (- Korea)
2016-11-22 08:30Distribution SiteLocky
manhtienphat.com
MAT BAO TRADING & SERVICE COMPAN[...]125.212.252.2 (- Vietnam)
2016-11-22 08:30Distribution SiteLocky
kzprojekt.pl
nazwa.pl sp. z o.o.193.239.206.248 (- Poland)
2016-11-22 08:30Distribution SiteLocky
k-koubunsha.jp
202.164.227.193 (- Japan)
2016-11-22 08:30Distribution SiteLocky
lomtour.com
NAME.COM, INC.203.146.26.85 (- Thailand)
2016-11-22 08:29Distribution SiteLocky
icnvcopa.com
ENOM, INC. (n/a)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ablerkeawe.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-22 08:29Distribution SiteLocky
ayso722.org
FastDomain Inc. (n/a)
2016-11-22 08:29Distribution SiteLocky
hfhhk.com
GODADDY.COM, LLC104.216.51.3 (- United States)
2016-11-22 08:29Distribution SiteLocky
irnetshop.com
REALTIME REGISTER BV78.46.113.238 (- Germany)
2016-11-22 08:29Distribution SiteLocky
internationalservice.ro
ICI - ROTLD188.215.48.176 (- Romania)
2016-11-22 08:29Distribution SiteLocky
ipiasarnano.it
WIDE-REG217.73.227.20 (- Italy)
2016-11-22 08:29Distribution SiteLocky
emdrozd.net
KEY-SYSTEMS GMBH91.227.122.10 (- Poland)
2016-11-22 08:29Distribution SiteLocky
gerardfetter.com
GODADDY.COM, LLC74.218.154.76 (- United States)
2016-11-22 08:29Distribution SiteLocky
nnptrading.com
DOMAIN.COM, LLC203.151.233.116 (- Thailand)
2016-11-22 08:28Distribution SiteLocky
vyingouch.com
KEY-SYSTEMS GMBH204.11.56.48 (- Virgin Islands)
2016-11-22 08:28Distribution SiteLocky
dangdika.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-22 08:28Distribution SiteLocky
laszloiparcikk.hu
195.228.86.32 (- Hungary)
2016-11-22 08:28Distribution SiteLocky
mildreddeskinsjewelry.com
GODADDY.COM, LLC50.63.202.56 (- United States)
2016-11-22 08:28Distribution SiteLocky
mygfiltre.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-11-22 08:28Distribution SiteLocky
espansioneimmobiliare.com
WILD WEST DOMAINS, LLC192.124.249.107 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >