Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-10 15:46Distribution SiteLocky
lv-nexis.com
IP MIRROR PTE LTD. DBA IP MIRROR103.104.196.34 (- Singapore)
2016-11-10 15:46Distribution SiteLocky
ibluegreen.com
GABIA, INC.222.231.31.195 (- Korea)
2016-11-10 15:46Distribution SiteLocky
globaldoctors.asia
IP Mirror Pte Ltd dba IP MIRROR [...]198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS46015, - United States)
198.49.23.144 (AS46015, - United States)
198.49.23.145 (AS53831, - United States)
2016-11-10 15:46Distribution SiteLocky
lojaodaconstrucao.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]191.6.204.151 (- Brazil)
2016-11-10 15:46Distribution SiteLocky
lkis.or.id
104.27.132.143 (- United States) +1 A record(s) 104.27.133.143 (AS13335, - United States)
2016-11-10 15:46Distribution SiteLocky
oontsheol.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 15:45Distribution SiteLocky
merchantcn.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-10 15:45Distribution SiteLocky
nancyabout.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:45Distribution SiteLocky
loraycomunicaciones.com.ar
198.50.188.17 (- Argentina)
2016-11-10 15:45Distribution SiteLocky
micdor.com
ENOM, INC.185.37.151.142 (- Israel)
2016-11-10 15:45Distribution SiteLocky
axisfluey.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 15:44Distribution SiteLocky
imein.net
BEIJING INNOVATIVE LINKAGE TECHN[...] (n/a)
2016-11-10 15:44Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:44Distribution SiteLocky
luxurylivingph.com
ENOM, INC. (n/a)
2016-11-10 15:44Distribution SiteLocky
liangriyou.cn
厦门易名科技股份有限[...] (n/a)
2016-11-10 15:43Distribution SiteLocky
frejasvej.dk
46.30.213.130 (- Denmark)
2016-11-10 15:43Distribution SiteLocky
musicalabanza.org
eNom, Inc. (n/a)
2016-11-10 15:43Distribution SiteLocky
dipland.tk
Freedom Registry, Inc. (n/a)
2016-11-10 15:43Distribution SiteLocky
gokkusagidagitim.com.tr
94.73.146.100 (- Turkey)
2016-11-10 15:43Distribution SiteLocky
kreanova.fr
OVH213.186.33.19 (- France)
2016-11-10 15:43Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 15:43Distribution SiteLocky
activedd.net
GODADDY.COM, LLC184.107.144.138 (- Canada)
2016-11-10 15:43Distribution SiteLocky
lordalexleon.com
1 API GMBH (n/a)
2016-11-10 15:43Distribution SiteLocky
gruppoeslabon.com.ph
203.119.6.98 (- Philippines)
2016-11-10 15:43Distribution SiteLocky
kuszowka.pl
nazwa.pl sp. z o.o.91.239.66.134 (- Poland)
2016-11-10 15:43Distribution SiteLocky
lowcostveterinarios.com
GODADDY.COM, LLC (n/a)
2016-11-10 15:42Distribution SiteLocky
luckyway.kz
ICPS95.56.232.60 (- Kazakhstan)
2016-11-10 15:42Distribution SiteLocky
misaho.com.ar
158.69.98.141 (- Canada)
2016-11-10 15:42Distribution SiteLocky
mirohosting.ru
R01-RU (n/a)
2016-11-10 15:42Distribution SiteLocky
3.ihenan.com
ENAME TECHNOLOGY CO., LTD.128.1.70.130 (- United States) +1 A record(s) 128.1.70.131 (AS37963, - United States)
2016-11-10 15:42Distribution SiteLocky
malamalamak9.net
NAMESECURE.COM (n/a)
2016-11-10 15:42Distribution SiteLocky
gesund-fit-leben.com
ENOM, INC. (n/a)
2016-11-10 15:42Distribution SiteLocky
gerardfetter.com
GODADDY.COM, LLC74.218.154.76 (- United States)
2016-11-10 15:42Distribution SiteLocky
hexinjituan.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-11-10 15:42Distribution SiteLocky
lubrinor.pt
94.126.169.40 (- Portugal)
2016-11-10 15:42Distribution SiteLocky
jyxiangqin.com
CHENGDU WEST DIMENSION DIGITAL T[...]107.178.125.31 (- United States)
2016-11-10 15:41Distribution SiteLocky
landauglobal.co.uk
Promo People, Inc. (n/a)
2016-11-10 15:41Distribution SiteLocky
hundeschulegoerg.de
217.160.0.219 (- Germany)
2016-11-10 15:41Distribution SiteLocky
bj-fzwb.com
SHANGHAI YOVOLE NETWORKS INC. (n/a)
2016-11-10 15:41Distribution SiteLocky
iriscodes.nl
The Registrar Company B.V. (n/a)
2016-11-10 15:41Distribution SiteLocky
motomoto.jp
219.94.159.148 (- Japan)
2016-11-10 15:41Distribution SiteLocky
horecajenp.nl
Mijn InternetOplossing B.V.213.227.146.112 (- Netherlands)
2016-11-10 15:41Distribution SiteLocky
liverdan.be
OVH213.186.33.48 (- France)
2016-11-10 15:41Distribution SiteLocky
oxbridgemedica.net
123-REG LIMITED (n/a)
2016-11-10 15:41Distribution SiteLocky
moymir58.ru
REGTIME-RU (n/a)
2016-11-10 15:41Distribution SiteLocky
house-of-quality.com
WEB COMMERCE COMMUNICATIONS LIMI[...]43.227.231.94 (- Singapore)
2016-11-10 15:41Distribution SiteLocky
jsydjc.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-10 15:40Distribution SiteLocky
magicaltouch.co
GODADDY.COM, INC. (n/a)
2016-11-10 15:40Distribution SiteLocky
adultmagstore.co.uk
123-Reg Limited t/a 123-reg185.2.4.92 (- Italy)
2016-11-10 15:40Distribution SiteLocky
mervserver.nl
The Registrar Company B.V. (n/a)
2016-11-10 15:40Distribution SiteLocky
laundryonwheels.ca
eNom Canada Corp.23.236.62.147 (- United States)
2016-11-10 15:40Distribution SiteLocky
nancyabout.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:40Distribution SiteLocky
jawar.eu
nazwa.pl sp. z o.o. (n/a)
2016-11-10 15:40Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 15:40Distribution SiteLocky
mimatefacil.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.99.13.70 (- Canada)
2016-11-10 15:39Distribution SiteLocky
maximumauction.com
GODADDY.COM, LLC166.62.125.116 (- United States)
2016-11-10 15:39Distribution SiteLocky
asrcargo.ru
R01-RU91.219.194.19 (- Russian Federation)
2016-11-10 15:39Distribution SiteLocky
kwlbroadcast.com
CV. JOGJACAMP114.57.247.170 (- Indonesia)
2016-11-10 15:39Distribution SiteLocky
kiancable.co
REALTIME REGISTER B.V.88.99.235.227 (- Germany)
2016-11-10 10:42Payment SiteCerber
vyohacxzoue32vvk.b14kkk.bid
Eranet International Limited (n/a)
2016-11-10 07:01Distribution SiteLocky
lipfest.ru
R01-RU (n/a)
2016-11-10 07:01Distribution SiteLocky
mainlandfishfarm.com
GODADDY.COM, LLC (n/a)
2016-11-10 07:00Distribution SiteLocky
dalezohak.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 07:00Distribution SiteLocky
isusip.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]80.244.162.32 (- Israel)
2016-11-10 07:00Distribution SiteLocky
frisors.dk
(n/a)
2016-11-10 07:00Distribution SiteLocky
fuchang888.com
XIN NET TECHNOLOGY CORPORATION104.165.99.155 (- United States)
2016-11-10 07:00Distribution SiteLocky
gaozhao-edu.com
ENOM, INC.154.210.236.202 (- United States)
2016-11-10 07:00Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 07:00Distribution SiteLocky
hdtv9.com
REGISTER.IT SPA23.20.239.12 (- United States)
2016-11-10 06:58Distribution SiteLocky
mesohair.pl
Consulting Service Sp. z o.o.46.242.148.59 (- Poland)
2016-11-10 06:58Distribution SiteLocky
goedvanstart.nu
The Registrar C.31.186.172.203 (- Netherlands)
2016-11-10 06:58Distribution SiteLocky
dalezohak.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 06:57Distribution SiteLocky
groundfloorelevator.com
GODADDY.COM, LLC (n/a)
2016-11-10 06:57Distribution SiteLocky
hartphp.eu
nazwa.pl sp. z o.o.104.18.44.61 (- United States) +1 A record(s) 104.18.45.61 (AS13335, - United States)
2016-11-10 06:57Distribution SiteLocky
tikkatawgi.com
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:57Distribution SiteLocky
mainsl.es
31.47.73.164 (- Spain)
2016-11-10 06:57Distribution SiteLocky
jinanlingshi.com
MAFF INC.154.95.224.181 (- United States)
2016-11-10 06:57Distribution SiteLocky
cussocrane.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-10 06:57Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:57Distribution SiteLocky
kemerealty.com
GODADDY.COM, LLC198.71.232.3 (- United States)
2016-11-10 06:57Distribution SiteLocky
globissys.co.id
219.83.68.69 (- Indonesia)
2016-11-10 06:56Distribution SiteLocky
gomelnaushnik.com
TUCOWS DOMAINS INC. (n/a)
2016-11-10 06:56Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
mesdan.biz
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-11-10 06:56Distribution SiteLocky
crapevadim.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
gmaster.eu
Realtime Register B.V.213.132.197.4 (- Netherlands)
2016-11-10 06:56Distribution SiteLocky
droolunkin.net
KEY-SYSTEMS GMBH (n/a)
2016-11-10 06:56Distribution SiteLocky
goldenroots.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]141.138.168.149 (- Netherlands)
2016-11-10 06:56Distribution SiteLocky
flowersleds.com
INTERNET DOMAIN SERVICE BS CORP78.140.191.6 (- Netherlands)
2016-11-10 04:35Botnet C&CLocky
158.69.223.5
158.69.223.5 (- Canada)
2016-11-09 22:16Payment SiteCerber
vyohacxzoue32vvk.5i0ukv.bid
Eranet International Limited (n/a)
2016-11-09 15:30Distribution SiteLocky
hotelvinayakpalace.in
GoDaddy.com, LLC (R101-AFIN)50.62.160.133 (- United States)
2016-11-09 15:30Distribution SiteLocky
maketiandi.com
CHENGDU WEST DIMENSION DIGITAL T[...]154.91.228.178 (- Hong Kong)
2016-11-09 15:30Distribution SiteLocky
luigipellegrini.it
OMNIBUS-REG130.211.138.188 (- United States)
2016-11-09 15:29Distribution SiteLocky
komputery-szczytno.pl
Consulting Service Sp. z o.o.94.152.46.41 (- Poland)
2016-11-09 15:29Distribution SiteLocky
cetidawabi.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:29Distribution SiteLocky
hippaupsup.com
KEY-SYSTEMS GMBH (n/a)
2016-11-09 15:29Distribution SiteLocky
hoardmaire.com
KEY-SYSTEMS GMBH204.11.56.48 (- Virgin Islands)
2016-11-09 15:29Distribution SiteLocky
melkar.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.124.5.33 (- Turkey)
2016-11-09 15:28Distribution SiteLocky
cetidawabi.com
KEY-SYSTEMS GMBH (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >