Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-09-19 14:19Distribution SiteLocky
download.justowin.it
ARUBA-REG95.110.225.147 (- Italy)
2017-09-19 14:19Distribution SiteLocky
housecafe-essen.de
(n/a)
2017-09-19 14:18Distribution SiteLocky
isiquest1.com
OVH62.210.222.81 (- France)
2017-09-19 14:18Distribution SiteLocky
felixsolis.mobi
Hosting Concepts B.V. dba Openpr[...]81.46.223.159 (- Spain)
2017-09-19 10:25Distribution SiteLocky
arsmakina.org
Reg2C.com Inc.195.142.1.93 (- Turkey)
2017-09-19 10:25Distribution SiteLocky
g-peer.at
217.172.186.114 (- Germany)
2017-09-19 10:25Distribution SiteLocky
ecofloraholland.nl
NR Automatisering95.142.51.67 (- Netherlands)
2017-09-19 10:24Distribution SiteLocky
ycgrp.jp
(n/a)
2017-09-19 10:24Distribution SiteLocky
gui-design.de
92.51.181.237 (- Germany)
2017-09-19 10:24Distribution SiteLocky
zionbrand.su
REGRU-SU (n/a)
2017-09-19 10:23Distribution SiteLocky
foodbikers.ch
switchplus AG (n/a)
2017-09-19 08:51Botnet C&CLocky
109.234.35.75
109.234.35.75 (- Russian Federation)
2017-09-19 06:23Distribution SiteLocky
cornyproposals.com
GoDaddy.com, LLC184.168.111.139 (- United States)
2017-09-19 06:23Distribution SiteLocky
wiskundebijles.nu
Key-Systems GmbH62.212.95.30 (- Netherlands)
2017-09-19 06:23Distribution SiteLocky
montecortelhas.com
eNom, Inc.80.172.241.21 (- Portugal)
2017-09-19 06:23Distribution SiteLocky
autoecolekim95.com
Gandi SAS178.20.66.207 (- France)
2017-09-19 06:22Distribution SiteLocky
wenger-werkzeugbau.de
87.230.17.247 (- Germany)
2017-09-19 06:22Distribution SiteLocky
walkama.net
eNom, Inc. (n/a)
2017-09-19 06:22Distribution SiteLocky
pnkparamount.com
Network Solutions, LLC.217.160.231.196 (- Germany)
2017-09-19 06:22Distribution SiteLocky
lasdamas.com
GoDaddy.com, LLC (n/a)
2017-09-19 06:22Distribution SiteLocky
accountingservices.apec.org
Network Solutions, LLC123.100.239.53 (- Singapore)
2017-09-19 06:21Distribution SiteLocky
petromarket.ir
(n/a)
2017-09-19 06:21Distribution SiteLocky
dmlex.adlino.be
The Registrar Company B.V.91.121.110.23 (- France)
2017-09-19 06:21Distribution SiteLocky
autoecoleeurope.com
Gandi SAS178.20.66.207 (- France)
2017-09-19 06:21Distribution SiteLocky
v-chords.de
85.214.62.160 (- Germany)
2017-09-19 06:21Distribution SiteLocky
georginabringas.com
Tucows Domains Inc.40.76.209.29 (- United States)
2017-09-19 06:20Distribution SiteLocky
eurecas.org
OnlineNIC Inc.188.65.87.2 (- Italy)
2017-09-19 06:10Botnet C&CLocky
91.201.41.91
91.201.41.91 (- Russian Federation)
2017-09-19 06:10Botnet C&CLocky
109.248.222.47
109.248.222.47 (- Russian Federation)
2017-09-18 12:12Distribution SiteLocky
ekolapsm.top
Eranet International Limited (n/a)
2017-09-18 12:12Distribution SiteLocky
tsivn.com.vn
103.21.150.15 (- Vietnam)
2017-09-18 12:12Distribution SiteLocky
longvanceramics.com.vn
(n/a)
2017-09-18 12:11Distribution SiteLocky
rockjonadd.top
Eranet International Limited (n/a)
2017-09-18 10:00Distribution SiteLocky
unifiedfloor.com
Network Solutions, LLC.204.11.56.48 (- Virgin Islands)
2017-09-18 09:59Distribution SiteLocky
qstom.com
Wild West Domains, LLC23.236.62.147 (- United States)
2017-09-18 09:59Distribution SiteLocky
w4fot.com
GoDaddy.com, LLC (n/a)
2017-09-18 09:59Distribution SiteLocky
www.elitecommunications.co.uk
Innovise Software and Solutions [...]91.238.163.172 (- United Kingdom)
2017-09-18 09:59Distribution SiteLocky
saitis.eu
Easy by Europlanet (n/a)
2017-09-18 09:58Distribution SiteLocky
troyriser.com
eNom, Inc.98.124.251.167 (- United States)
2017-09-18 09:17Distribution SiteLocky
lanzensberger.de
(n/a)
2017-09-18 09:17Distribution SiteLocky
abelfaria.pt
109.71.42.24 (- Portugal)
2017-09-18 09:17Distribution SiteLocky
yildizmakina74.com
PDR Ltd. d/b/a PublicDomainRegis[...]85.95.237.29 (- Turkey)
2017-09-18 09:16Distribution SiteLocky
miliaraic.ru
R01-RU (n/a)
2017-09-18 09:16Distribution SiteLocky
web-ch-team.ch
Hoststar - Multimedia Networks A[...] (n/a)
2017-09-18 09:02Botnet C&CLocky
91.191.184.158
91.191.184.158 (- Russian Federation)
2017-09-18 09:02Botnet C&CLocky
195.123.218.226
195.123.218.226 (- Netherlands)
2017-09-18 08:49Distribution SiteLocky
cedipsa.com
Ascio Technologies, Inc. Danmark[...]93.189.91.30 (- Spain)
2017-09-17 16:03Botnet C&CLocky
qlwnvdjwro.pw
Namecheap208.100.26.251 (- United States)
2017-09-17 08:56Payment SiteCerber
qfjhpgbefuhenjp7.12efwa.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-16 14:07Payment SiteCerber
oqwygprskqv65j72.1gam57.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-16 14:06Payment SiteCerber
oqwygprskqv65j72.12kb9j.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-15 23:39Botnet C&CPayCrypt
vgolfusa.com
Launchpad.com, Inc.192.185.224.86 (- United States)
2017-09-15 12:33Botnet C&CLocky
5.34.180.135
5.34.180.135 (- Netherlands)
2017-09-14 15:16Botnet C&CLocky
149.154.68.190
149.154.68.190 (- Russian Federation)
2017-09-14 11:30Distribution SiteLocky
wwwa.su
REGRU-SU77.222.61.213 (- Russian Federation)
2017-09-14 10:29Distribution SiteLocky
recturf.com.au
TPP Wholesale Pty Ltd103.236.163.40 (- Australia)
2017-09-14 02:07Botnet C&CSage
mbfce24rgn65bx3g.l3by4d.com
Web Commerce Communications Limi[...] (n/a)
2017-09-12 14:24Distribution SiteLocky
ruisi.fr
ONLINE SAS195.154.227.5 (- France)
2017-09-12 11:49Botnet C&CLocky
217.106.238.89
217.106.238.89 (- Russian Federation)
2017-09-12 09:59Distribution SiteLocky
mh-service.ru
RU-CENTER-RU89.253.235.118 (- Russian Federation)
2017-09-12 09:59Distribution SiteLocky
alexkreeger.com
eNom, Inc.66.199.174.108 (- Canada)
2017-09-12 09:59Distribution SiteLocky
mobius-group.com
Tucows Domains Inc. (n/a)
2017-09-11 20:39Payment SiteCerber
oqwygprskqv65j72.1dofqx.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-11 20:32Payment SiteCerber
oqwygprskqv65j72.1fdlhn.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-11 15:41Distribution SiteLocky
alu-bel.com
Domain.com, LLC212.63.108.71 (- Spain)
2017-09-11 15:41Distribution SiteLocky
setincon.com
Melbourne IT, Ltd. d/b/a Interne[...]64.6.250.196 (- United States)
2017-09-11 15:41Distribution SiteLocky
phuket-olivia-yoga.com
eNom, Inc. (n/a)
2017-09-11 15:40Distribution SiteLocky
pdj.co.id
104.244.120.69 (- United States)
2017-09-11 15:40Distribution SiteLocky
qualitystaffingservices.net
eNom1040, Inc.216.222.194.177 (- United States)
2017-09-10 07:21Botnet C&CCryptoWall
vsedveri-33.ru
R01-RU81.177.139.211 (- Russian Federation)
2017-09-08 21:02Botnet C&CLocky
185.67.2.156
185.67.2.156 (- Ukraine)
2017-09-08 17:25Botnet C&CCryptoWall
www.hanecaklaw.com
GoDaddy.com, LLC192.185.193.212 (- United States)
2017-09-08 13:56Payment SiteCerber
oqwygprskqv65j72.1mudaw.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-08 10:12Distribution SiteLocky
ostiavolleyclub.it
WIDE-REG198.55.29.67 (- Turkey)
2017-09-08 10:12Distribution SiteLocky
activ-conduite.eu
GANDI178.20.66.207 (- France)
2017-09-08 10:12Distribution SiteLocky
awholeblueworld.com
Tucows Domains Inc.66.36.173.215 (- United States)
2017-09-08 10:11Distribution SiteLocky
aac-autoecole.com
Gandi SAS (n/a)
2017-09-08 10:11Distribution SiteLocky
lagrangeglassandmirrorco.com
eNom, Inc.167.114.205.185 (- Canada)
2017-09-08 10:11Distribution SiteLocky
suncoastot.com
eNom, Inc.98.124.252.176 (- United States)
2017-09-08 10:11Distribution SiteLocky
autoecolecarnot.com
Gandi SAS (n/a)
2017-09-08 10:11Distribution SiteLocky
qxr33qxr.com
Tucows Domains Inc.67.210.102.240 (- United States)
2017-09-08 10:10Distribution SiteLocky
studiotoscanosrl.it
WIDE-REG62.149.128.151 (- Italy) +5 A record(s) 62.149.128.154 (AS31034, - Italy)
62.149.128.157 (AS31034, - Italy)
62.149.128.160 (AS31034, - Italy)
62.149.128.163 (AS31034, - Italy)
62.149.128.166 (AS31034, - Italy)
2017-09-08 10:10Distribution SiteLocky
multicolourflyers.co.uk
123-Reg Limited t/a 123-reg87.117.242.30 (- United Kingdom)
2017-09-08 10:10Distribution SiteLocky
geolearner.com
1&1 Internet SE (n/a)
2017-09-08 10:09Distribution SiteLocky
blaeberrycabin.com
Namespro Solutions Inc.209.99.40.222 (- United States)
2017-09-08 10:09Distribution SiteLocky
dueeffepromotion.com
eNom, Inc.89.96.90.14 (- Italy)
2017-09-08 10:09Distribution SiteLocky
handhi.com
Tucows Domains Inc.162.213.255.19 (- United States)
2017-09-08 10:09Distribution SiteLocky
weekendjevliegen.nl
Nedlook internet62.212.152.143 (- Netherlands)
2017-09-08 10:08Distribution SiteLocky
pack-lines.com
eNom, Inc.204.11.56.48 (- Virgin Islands)
2017-09-08 07:11Distribution SiteLocky
montessibooks.com
Wild West Domains, LLC166.62.123.214 (- United States)
2017-09-08 07:11Distribution SiteLocky
brandingforbuyout.com
GoDaddy.com, LLC23.236.62.147 (- United States)
2017-09-08 07:10Distribution SiteLocky
bit-chasers.com
eNom, Inc. (n/a)
2017-09-08 07:10Distribution SiteLocky
lp-usti.cz
REG-ZONER77.48.30.84 (- Czech Republic)
2017-09-07 14:54Botnet C&CLocky
lrmficvqs.pw
Namecheap208.100.26.251 (- United States)
2017-09-07 14:01Distribution SiteLocky
dueeffepromotion.com
eNom, Inc.89.96.90.14 (- Italy)
2017-09-07 14:01Distribution SiteLocky
db-b-s.com
RegistryGate GmbH217.172.189.173 (- Germany)
2017-09-07 14:01Distribution SiteLocky
brandingforbuyout.com
GoDaddy.com, LLC23.236.62.147 (- United States)
2017-09-07 14:01Distribution SiteLocky
etforhartohat.info
Eranet International Limited (n/a)
2017-09-07 14:00Distribution SiteLocky
qxr33qxr.com
Tucows Domains Inc.67.210.102.240 (- United States)
2017-09-07 11:02Payment SiteCerber
oqwygprskqv65j72.1aj1bb.top
Eranet International Limited127.0.0.1 (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >