Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-21 11:45Distribution SiteLocky
psouutarnow.org
Key-Systems GmbH72.52.4.119 (- United States)
2016-11-21 11:45Distribution SiteLocky
naschlouey.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-21 11:45Distribution SiteLocky
sambaplack.com
KEY-SYSTEMS GMBH (n/a)
2016-11-21 11:45Distribution SiteLocky
ulmicsulfa.net
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-21 11:45Distribution SiteLocky
ehaaranen.com
GODADDY.COM, LLC143.95.79.207 (- United States)
2016-11-21 10:41Distribution SiteLocky
dverizamki-t34.ru
RU-CENTER-RU91.217.9.212 (- Russian Federation)
2016-11-21 10:38Distribution SiteLocky
khatibul-umamwiranu.com
CV. RUMAHWEB INDONESIA (n/a)
2016-11-21 10:38Distribution SiteLocky
jjbook.net
CHENGDU WEST DIMENSION DIGITAL T[...]154.80.142.29 (- South Africa)
2016-11-21 10:38Distribution SiteLocky
kppngarut.org
CV. Jogjacamp (n/a)
2016-11-21 10:38Distribution SiteLocky
iovel.ro
Telekom Romania Communications S[...]31.14.15.244 (- Romania)
2016-11-21 10:38Distribution SiteLocky
jaures.be
Ligne Web Services ( LWS )46.105.57.169 (- France)
2016-11-21 10:38Distribution SiteLocky
kahane.fr
OVH192.0.78.24 (- United States) +1 A record(s) 192.0.78.25 (AS2635, - United States)
2016-11-21 10:38Distribution SiteLocky
ayurvedic.by
Reliable Software, Ltd31.130.203.162 (- Belarus)
2016-11-21 10:38Distribution SiteLocky
icdsarch.com
TUCOWS DOMAINS INC. (n/a)
2016-11-21 10:38Distribution SiteLocky
intertaller.eu
GANDI (n/a)
2016-11-21 10:38Distribution SiteLocky
jellybaby.org.uk
Mr Max Ramyar t/a Abel Internet84.18.201.18 (- United Kingdom)
2016-11-21 10:38Distribution SiteLocky
jltl.net
CHENGDU WEST DIMENSION DIGITAL T[...]121.42.113.102 (- China)
2016-11-21 10:38Distribution SiteLocky
joshcomeauxhair.com
GODADDY.COM, LLC184.168.221.35 (- United States)
2016-11-21 10:37Distribution SiteLocky
markosia.com
123-REG LIMITED192.0.78.24 (- United States) +1 A record(s) 192.0.78.25 (AS2635, - United States)
2016-11-21 10:37Distribution SiteLocky
kemerhaber.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-21 10:37Distribution SiteLocky
hotelsheikhpalace.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-11-21 10:37Distribution SiteLocky
kubstroy.by
Active Technologies LLC (n/a)
2016-11-21 10:37Distribution SiteLocky
kaldar.pl
Consulting Service Sp. z o.o.185.204.219.126 (- Poland)
2016-11-21 10:37Distribution SiteLocky
kirillpryadukhin.ru
REGRU-RU185.105.224.243 (- Russian Federation)
2016-11-21 10:37Distribution SiteLocky
mclodesigns.com
GODADDY.COM, LLC148.72.1.119 (- United States)
2016-11-21 10:37Distribution SiteLocky
job0916.cn
上海美橙科技信息发展[...]104.199.193.16 (- United States)
2016-11-21 10:37Distribution SiteLocky
decorvise.com
1&1 INTERNET SE72.52.4.119 (- United States)
2016-11-21 10:37Distribution SiteLocky
innovationcircle.com
KEY-SYSTEMS GMBH5.200.16.220 (- Netherlands)
2016-11-21 10:37Distribution SiteLocky
invisplast.ru
R01-RU194.58.112.174 (- Russian Federation)
2016-11-21 10:37Distribution SiteLocky
kovac-trade.com
TLDS, LLC DBA SRSPLUS208.91.197.46 (- Virgin Islands)
2016-11-21 10:36Distribution SiteLocky
jmltda.cl
(n/a)
2016-11-21 10:36Distribution SiteLocky
kuhnidejan.ru
R01-RU (n/a)
2016-11-21 10:36Distribution SiteLocky
kuangfenxian.com
HICHINA ZHICHENG TECHNOLOGY LTD.120.25.251.140 (- China)
2016-11-21 10:36Distribution SiteLocky
livingnetwork.co.za
148.251.21.24 (- Germany)
2016-11-21 10:36Distribution SiteLocky
mggsoft.com
ENOM, INC.209.59.190.124 (- United States)
2016-11-21 10:36Distribution SiteLocky
sheerfoldy.com
PAKNIC (PRIVATE) LIMITED104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS16276, - United States)
2016-11-21 10:36Distribution SiteLocky
madde.org
Tucows Inc.5.2.83.60 (- Turkey)
2016-11-21 10:36Distribution SiteLocky
imexltd.eu
Heart Internet Ltd176.32.230.9 (- United Kingdom)
2016-11-21 10:36Distribution SiteLocky
majesticimmo.com
GENIOUS COMMUNICATIONS SARL/AU51.38.248.0 (- United Kingdom)
2016-11-21 10:36Distribution SiteLocky
impobg.eu
PDR Ltd. (n/a)
2016-11-20 23:02Payment SiteCerber
ffoqr3ug7m726zou.w22p3v.top
Eranet International Limited (n/a)
2016-11-20 22:59Payment SiteCerber
xrhwryizf5mui7a5.h44l3d.bid
Eranet International Limited (n/a)
2016-11-20 16:16Botnet C&CLocky
185.75.46.73
185.75.46.73 (- Russian Federation)
2016-11-20 13:45Payment SiteCerber
ffoqr3ug7m726zou.e1e7w2.top
Eranet International Limited (n/a)
2016-11-20 11:12Payment SiteCerber
ffoqr3ug7m726zou.5m2n7x.top
Eranet International Limited (n/a)
2016-11-20 10:47Payment SiteCerber
vyohacxzoue32vvk.u8e2dz.top
Eranet International Limited (n/a)
2016-11-20 08:42Payment SiteCerber
lfdachijzuwx4bc4.ci221p.top
Eranet International Limited (n/a)
2016-11-20 06:48Payment SiteCerber
vyohacxzoue32vvk.pr52ni.top
Eranet International Limited (n/a)
2016-11-20 04:40Payment SiteCerber
ffoqr3ug7m726zou.1feasu.top
Eranet International Limited (n/a)
2016-11-19 21:20Payment SiteCerber
xrhwryizf5mui7a5.r8c85p.top
Eranet International Limited (n/a)
2016-11-19 19:30Payment SiteCerber
vyohacxzoue32vvk.5s96fr.top
Eranet International Limited (n/a)
2016-11-19 09:06Botnet C&CLocky
89.108.73.124
89.108.73.124 (- Russian Federation)
2016-11-19 08:30Payment SiteCerber
vyohacxzoue32vvk.r3b2sh.top
Eranet International Limited (n/a)
2016-11-19 08:08Payment SiteCerber
ffoqr3ug7m726zou.lruwth.top
Eranet International Limited (n/a)
2016-11-19 02:21Botnet C&CLocky
mmhmtea.pw
Namecheap208.100.26.234 (- United States)
2016-11-18 22:50Payment SiteCerber
ffoqr3ug7m726zou.2msuuj.top
Eranet International Limited (n/a)
2016-11-18 19:44Payment SiteCerber
ffoqr3ug7m726zou.gwz8gh.top
Eranet International Limited (n/a)
2016-11-18 18:59Payment SiteCerber
vyohacxzoue32vvk.ezb568.top
Eranet International Limited (n/a)
2016-11-18 18:40Payment SiteCerber
ffoqr3ug7m726zou.zkxb17.top
Eranet International Limited (n/a)
2016-11-18 17:58Payment SiteCerber
vyohacxzoue32vvk.ncw0rp.top
Eranet International Limited (n/a)
2016-11-18 10:53Payment SiteTorrentLocker
ojmekzw4mujvqeju.fineboy.at
(n/a)
2016-11-18 09:55Payment SiteCerber
vyohacxzoue32vvk.vjso7r.top
Eranet International Limited (n/a)
2016-11-18 08:07Payment SiteCerber
vyohacxzoue32vvk.jnv1df.top
Eranet International Limited (n/a)
2016-11-17 15:40Payment SiteCerber
lfdachijzuwx4bc4.fe6cf2.top
Eranet International Limited (n/a)
2016-11-16 18:35Payment SiteCerber
vyohacxzoue32vvk.3t3hyf.top
Eranet International Limited (n/a)
2016-11-16 16:05Payment SiteCerber
ffoqr3ug7m726zou.735giv.top
Eranet International Limited (n/a)
2016-11-16 06:33Payment SiteCerber
vyohacxzoue32vvk.o5b17o.top
Eranet International Limited (n/a)
2016-11-15 23:09Payment SiteCerber
ffoqr3ug7m726zou.xe1ws1.top
Eranet International Limited (n/a)
2016-11-15 11:53Botnet C&CLocky
185.82.217.29
185.82.217.29 (- Bulgaria)
2016-11-15 10:07Payment SiteTorrentLocker
ojmekzw4mujvqeju.minitili.at
(n/a)
2016-11-15 07:39Payment SiteCerber
ffoqr3ug7m726zou.ndnmuk.top
Eranet International Limited (n/a)
2016-11-15 02:48Botnet C&CLocky
107.181.174.34
107.181.174.34 (- United States)
2016-11-14 19:15Botnet C&CLocky
93.170.123.119
93.170.123.119 (- Czech Republic)
2016-11-14 11:15Payment SiteCerber
ffoqr3ug7m726zou.rssh3l.bid
Eranet International Limited (n/a)
2016-11-14 09:27Payment SiteCerber
ffoqr3ug7m726zou.2rl0pv.top
Eranet International Limited (n/a)
2016-11-14 06:45Payment SiteCerber
lfdachijzuwx4bc4.vrgdrs.top
Eranet International Limited (n/a)
2016-11-14 04:11Payment SiteCerber
ffoqr3ug7m726zou.iocvou.top
Eranet International Limited (n/a)
2016-11-14 01:16Payment SiteCerber
ahuqfrqk54v3vnzj.8kiec2.top
Eranet International Limited (n/a)
2016-11-14 00:58Payment SiteCerber
ffoqr3ug7m726zou.bwei9h.top
Eranet International Limited (n/a)
2016-11-13 20:45Payment SiteCerber
vyohacxzoue32vvk.k9p80d.top
Eranet International Limited (n/a)
2016-11-13 17:28Payment SiteCerber
vyohacxzoue32vvk.ewfp5y.bid
Eranet International Limited (n/a)
2016-11-13 11:26Payment SiteCerber
ffoqr3ug7m726zou.vjso7r.top
Eranet International Limited (n/a)
2016-11-13 09:16Distribution SiteLocky
madly.me
NameCheap, Inc. (n/a)
2016-11-13 09:15Distribution SiteLocky
metallbau-lamprecht.ch
hosttech GmbH185.101.158.113 (- Switzerland)
2016-11-13 09:15Distribution SiteLocky
angeredo.com
PAKNIC (PRIVATE) LIMITED199.191.50.140 (- Virgin Islands)
2016-11-13 09:15Distribution SiteLocky
lexcellence.ru
RU-CENTER-RU176.99.5.38 (- Russian Federation)
2016-11-13 09:15Distribution SiteLocky
mangdesign.com
BEIJING INNOVATIVE LINKAGE TECHN[...]121.40.24.159 (- China)
2016-11-13 09:15Distribution SiteLocky
stocktradex.com
1&1 INTERNET SE (n/a)
2016-11-13 09:15Distribution SiteLocky
minevitamin.com
NAME.COM, INC.103.233.194.240 (- Thailand)
2016-11-13 09:15Distribution SiteLocky
nasosy76.ru
REGRU-RU (n/a)
2016-11-13 09:15Distribution SiteLocky
kirulya.com
GODADDY.COM, LLC37.48.103.240 (- Netherlands)
2016-11-13 09:15Distribution SiteLocky
hzcysw.net
DOMAIN.COM, LLC103.113.8.152 (- Malaysia)
2016-11-13 09:15Distribution SiteLocky
tfeambalaj.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]31.210.157.44 (- Turkey)
2016-11-13 09:15Distribution SiteLocky
eddermiaul.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-13 09:15Distribution SiteLocky
itlider-web.ru
REGRU-RU141.8.192.20 (- Russian Federation)
2016-11-13 09:15Distribution SiteLocky
imzhangfei.com
CHENGDU WEST DIMENSION DIGITAL T[...]154.91.228.188 (- Hong Kong)
2016-11-13 09:14Distribution SiteLocky
ithoria.gr
85.25.200.105 (- Germany)
2016-11-13 09:14Distribution SiteLocky
hrlpk.com
ONLINENIC, INC.203.124.44.95 (- Pakistan)
2016-11-13 09:14Distribution SiteLocky
keseru.hu
94.199.178.22 (- Hungary)
2016-11-13 09:14Distribution SiteLocky
nepeanfinearts.com
TUCOWS DOMAINS INC.74.208.236.12 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >