Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-08 15:34Distribution SiteLocky
abercrombiesales.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-11-08 15:34Distribution SiteLocky
centinel.ca
Go Daddy Domains Canada, Inc142.166.44.174 (- Canada)
2016-11-08 15:34Distribution SiteLocky
ck.co.th
T.H.NIC Co., Ltd.203.146.140.64 (- Thailand)
2016-11-08 15:33Distribution SiteLocky
dessde.com
FASTDOMAIN, INC.93.188.2.51 (- Sweden)
2016-11-08 15:32Distribution SiteLocky
odinmanto.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:32Distribution SiteLocky
dowfrecap.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:32Distribution SiteLocky
www.cutillas.fr
OVH213.186.33.17 (- France)
2016-11-08 15:29Distribution SiteLocky
vexerrais.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:28Distribution SiteLocky
workcall.forumgroup.ro
ICI - ROTLD (n/a)
2016-11-08 15:28Distribution SiteLocky
thisnspeel.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:26Distribution SiteLocky
elektronstore.it
KPNQWEST-REG (n/a)
2016-11-08 15:26Distribution SiteLocky
earthboundpermaculture.org
Crazy Domains FZ-LLC (n/a)
2016-11-08 15:25Distribution SiteLocky
cheedellahousing.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-11-08 15:25Distribution SiteLocky
dwcell.com
GODADDY.COM, LLC162.213.255.40 (- United States)
2016-11-08 15:24Distribution SiteLocky
competc.ca
Tucows.com Co.69.172.239.145 (- United States)
2016-11-08 15:22Distribution SiteLocky
adriandomini.com.ar
200.85.96.96 (- Argentina)
2016-11-08 15:22Distribution SiteLocky
eroger.be
AXC (n/a)
2016-11-08 15:21Distribution SiteLocky
edrian.com
NETEARTH ONE INC. D/B/A NETEARTH50.63.202.90 (- United States)
2016-11-08 15:21Distribution SiteLocky
thisnspeel.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:21Distribution SiteLocky
corinnenewton.ca
Go Daddy Domains Canada, Inc69.90.163.180 (- Canada)
2016-11-08 15:21Distribution SiteLocky
assetcomputers.com.au
Melbourne IT216.37.42.30 (- United States)
2016-11-08 15:21Distribution SiteLocky
vexerrais.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:21Distribution SiteLocky
flurrbinh.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 15:20Distribution SiteLocky
odinmanto.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:20Distribution SiteLocky
ayurvedic.by
Reliable Software, Ltd31.130.203.162 (- Belarus)
2016-11-08 15:20Distribution SiteLocky
pastelesallegro.mx
GoDaddy.com184.168.221.62 (- United States)
2016-11-08 15:19Distribution SiteLocky
dunyam.ru
R01-RU (n/a)
2016-11-08 15:18Distribution SiteLocky
365aiwu.net
WEST263 INTERNATIONAL LIMITED142.252.28.157 (- United States)
2016-11-08 15:15Distribution SiteLocky
cafedelrey.es
143.95.77.231 (- United States)
2016-11-08 15:15Distribution SiteLocky
alpermetalsanayi.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]94.73.145.131 (- Turkey)
2016-11-08 15:15Distribution SiteLocky
flurrbinh.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 15:14Distribution SiteLocky
flurrbinh.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 15:14Distribution SiteLocky
bepxep.com
P.A. VIET NAM COMPANY LIMITED (n/a)
2016-11-08 15:14Distribution SiteLocky
dekoral.eu
home.pl S.A. (n/a)
2016-11-08 15:14Distribution SiteLocky
villaamericana.net
TUCOWS DOMAINS INC.95.243.201.56 (- Italy)
2016-11-08 15:13Distribution SiteLocky
chaturk.com
ENOM, INC.192.64.119.164 (- United States)
2016-11-08 15:13Distribution SiteLocky
dmamart.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-11-08 15:12Distribution SiteLocky
archmod.com
REALTIME REGISTER BV195.201.245.104 (- Russian Federation)
2016-11-08 15:11Distribution SiteLocky
dowfrecap.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:10Distribution SiteLocky
odinmanto.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:10Distribution SiteLocky
avon2you.ru
RU-CENTER-RU (n/a)
2016-11-08 15:10Distribution SiteLocky
cosmobalance.com
REGISTER.IT SPA195.110.124.133 (- Italy)
2016-11-08 15:10Distribution SiteLocky
85.92.144.157
n/a
2016-11-08 15:10Distribution SiteLocky
chandrphen.com
ENOM, INC.23.236.62.147 (- United States)
2016-11-08 15:09Distribution SiteLocky
dowfrecap.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:09Distribution SiteLocky
bst.tw
HINET198.98.108.125 (- United States)
2016-11-08 15:08Distribution SiteLocky
accenti.mx
Akky (Una division de NIC Mexico[...]66.7.213.100 (- United States)
2016-11-08 15:08Distribution SiteLocky
3-50-90.ru
REGRU-RU (n/a)
2016-11-08 15:08Distribution SiteLocky
gcw123.net
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-08 15:08Distribution SiteLocky
flurrbinh.net
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 15:07Distribution SiteLocky
odinmanto.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:07Distribution SiteLocky
berrysbarber.com
GODADDY.COM, LLC184.168.221.63 (- United States)
2016-11-08 15:07Distribution SiteLocky
thisnspeel.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:07Distribution SiteLocky
edubit.eu
Wild West Domains, Inc. (n/a)
2016-11-08 15:06Distribution SiteLocky
vexerrais.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:06Distribution SiteLocky
drmulchandani.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.235.104.91 (- India)
2016-11-08 15:05Distribution SiteLocky
concern-block.ru
RU-CENTER-RU185.48.238.223 (- Russian Federation)
2016-11-08 15:05Distribution SiteLocky
acrilion.ru
REGISTRATOR-RU (n/a)
2016-11-08 15:05Distribution SiteLocky
thisnspeel.com
IP MIRROR PTE LTD. DBA IP MIRROR184.105.192.2 (- United States)
2016-11-08 15:04Distribution SiteLocky
babuandanji.jp
202.191.118.248 (- Japan)
2016-11-08 15:04Distribution SiteLocky
antivirus.co.th
T.H.NIC Co., Ltd. (n/a)
2016-11-08 15:02Distribution SiteLocky
fibrotek.com
REGISTER.CA INC.184.107.112.65 (- Canada)
2016-11-08 15:02Distribution SiteLocky
vexerrais.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 15:02Distribution SiteLocky
donrigsby.com
GODADDY.COM, LLC143.95.253.196 (- United States)
2016-11-08 15:01Distribution SiteLocky
apidesign.ca
Promo People Inc.64.34.157.100 (- United States)
2016-11-08 15:00Distribution SiteLocky
handsomegroup.com
NETWORK SOLUTIONS, LLC.118.142.19.104 (- Hong Kong)
2016-11-08 15:00Distribution SiteLocky
inzt.net
INTERNET INVEST, LTD. DBA IMENA.[...] (n/a)
2016-11-08 14:58Distribution SiteLocky
geethikabedcollege.com
CRAZY DOMAINS FZ-LLC89.163.249.205 (- Germany)
2016-11-08 14:57Distribution SiteLocky
codanuscorp.com
NETWORK SOLUTIONS, LLC.184.168.131.241 (- United States)
2016-11-08 14:57Distribution SiteLocky
comovan.t5.com.br
201.33.17.100 (- Brazil)
2016-11-08 14:57Distribution SiteLocky
ajmontanaro.com
GODADDY.COM, LLC198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS26496, - United States)
198.49.23.144 (AS26496, - United States)
198.49.23.145 (AS26496, - United States)
2016-11-08 14:56Distribution SiteLocky
dowfrecap.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 14:56Distribution SiteLocky
dinglihn.com
BEIJING INNOVATIVE LINKAGE TECHN[...]162.209.164.147 (- United States)
2016-11-08 14:56Distribution SiteLocky
abclala.com
MAT BAO TRADING & SERVICE COMPAN[...] (n/a)
2016-11-08 13:17Distribution SiteLocky
hksv.jp
219.94.203.118 (- Japan)
2016-11-08 13:16Distribution SiteLocky
carrier-spb.ru
R01-RU (n/a)
2016-11-08 13:15Distribution SiteLocky
hassyuu.com
PSI-JAPAN, INC.211.13.196.160 (- Japan)
2016-11-08 13:15Distribution SiteLocky
filomak.com
FBS INC.94.73.150.72 (- Turkey)
2016-11-08 13:13Distribution SiteLocky
fuatbilgin.com
IHS TELEKOM, INC.209.99.40.224 (- United States)
2016-11-08 13:13Distribution SiteLocky
waag-azhar.com
TUCOWS DOMAINS INC.66.96.146.50 (- United States)
2016-11-08 13:12Distribution SiteLocky
gloriajeanscoffees.co.th
T.H.NIC Co., Ltd.203.170.193.200 (- Thailand)
2016-11-08 13:11Distribution SiteLocky
genelev.net
FBS INC.104.28.8.182 (- United States) +1 A record(s) 104.28.9.182 (AS133618, - United States)
2016-11-08 13:11Distribution SiteLocky
highlakehill.be
Webcreating IT Services176.62.168.124 (- Belgium)
2016-11-08 13:11Distribution SiteLocky
hg-bikes.de
195.42.120.80 (- Germany)
2016-11-08 13:10Distribution SiteLocky
rokematin.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-11-08 13:08Distribution SiteLocky
westprod.fr
IKOULA NET213.246.39.74 (- France)
2016-11-08 13:07Distribution SiteLocky
choopchirk.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 13:06Distribution SiteLocky
harpen.nl
Registrar.eu5.157.84.62 (- Netherlands)
2016-11-08 13:06Distribution SiteLocky
bappeda.palangkaraya.go.id
103.94.123.130 (- Indonesia)
2016-11-08 13:05Distribution SiteLocky
heederik.eu
Registrar.eu62.129.139.129 (- Netherlands)
2016-11-08 13:05Distribution SiteLocky
gelecekdiyarbakirsigorta.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.150.110 (- Turkey)
2016-11-08 13:04Distribution SiteLocky
carindoauto.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]45.64.1.97 (- Indonesia)
2016-11-08 13:03Distribution SiteLocky
gallato.com
GANDI SAS (n/a)
2016-11-08 13:03Distribution SiteLocky
ghaemshahr.net
REALTIME REGISTER BV (n/a)
2016-11-08 13:02Distribution SiteLocky
aloneadage.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-11-08 13:01Distribution SiteLocky
goodcatch.com
ADVANCED INTERNET TECHNOLOGIES, [...]216.117.187.62 (- United States)
2016-11-08 13:00Distribution SiteLocky
copperblues.ca
Go Daddy Domains Canada, Inc23.229.148.199 (- United States)
2016-11-08 12:59Distribution SiteLocky
giadinh24.com
ASCIO TECHNOLOGIES, INC. DANMARK[...] (n/a)
2016-11-08 12:57Distribution SiteLocky
coilgalvalumemurah.com
HOSTINGER UAB31.220.110.220 (- United States)
2016-11-08 12:57Distribution SiteLocky
test.gotoweb.pro
(n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >