Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-10-31 10:53Distribution SiteLocky
enliveshow.com
ENOM, INC. (n/a)
2016-10-31 10:52Distribution SiteLocky
utopiamanali.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]173.254.49.109 (- United States)
2016-10-31 10:50Distribution SiteLocky
coffeeteashop.ru
REGRU-RU37.230.114.67 (- Russian Federation)
2016-10-31 10:50Distribution SiteLocky
waynesinew.com
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-10-31 10:49Distribution SiteLocky
archilog.at
(n/a)
2016-10-31 10:49Distribution SiteLocky
ekotracks.com
GODADDY.COM, LLC104.199.125.189 (- United States)
2016-10-31 10:49Distribution SiteLocky
artemon.gr
46.105.57.169 (- France)
2016-10-31 10:49Distribution SiteLocky
timwhid.com
PAKNIC (PRIVATE) LIMITED184.105.192.2 (- United States)
2016-10-31 10:45Distribution SiteLocky
bobyfrancisandpradeep.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]75.119.201.229 (- United States)
2016-10-31 10:44Distribution SiteLocky
ri-vyoo.com
GODADDY.COM, LLC34.194.24.128 (- United States)
2016-10-31 10:41Distribution SiteLocky
oakridge-realty.com
TUCOWS DOMAINS INC.192.124.249.155 (- United States)
2016-10-31 10:40Distribution SiteLocky
fortuneprixgroup.com
GODADDY.COM, LLC23.20.239.12 (- United States)
2016-10-31 10:39Distribution SiteLocky
ajaraheritage.ge
91.212.213.28 (- Georgia)
2016-10-31 10:33Distribution SiteLocky
morenaart.com
GRANSY S.R.O D/B/A SUBREG.CZ23.20.239.12 (- United States)
2016-10-31 10:31Distribution SiteLocky
devinkellerart.com
ENOM, INC. (n/a)
2016-10-31 10:29Distribution SiteLocky
rktest.net
GODADDY.COM, LLC192.185.203.204 (- United States)
2016-10-31 10:29Distribution SiteLocky
webframez.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]69.64.68.126 (- United States)
2016-10-31 10:29Distribution SiteLocky
arabian-link.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-10-31 10:29Distribution SiteLocky
paulasalamanca.com
CSL COMPUTER SERVICE LANGENBACH [...]93.93.68.10 (- Spain)
2016-10-31 10:26Distribution SiteLocky
dor29.ru
REGTIME-RU (n/a)
2016-10-31 10:24Distribution SiteLocky
morenaart.com
GRANSY S.R.O D/B/A SUBREG.CZ23.20.239.12 (- United States)
2016-10-31 10:24Distribution SiteLocky
grupotalents.com
ENOM, INC.143.95.75.242 (- United States)
2016-10-31 10:23Distribution SiteLocky
haydistributing.com
GODADDY.COM, LLC192.124.249.18 (- United States)
2016-10-31 10:22Distribution SiteLocky
thungchang.go.th
T.H.NIC Co., Ltd.119.59.104.26 (- Thailand)
2016-10-31 10:21Distribution SiteLocky
cetinakademi.com
FBS INC. (n/a)
2016-10-31 10:19Distribution SiteLocky
newdawnexperience.com
GODADDY.COM, LLC107.180.3.61 (- United States)
2016-10-31 10:18Distribution SiteLocky
nixvector.com
NET 4 INDIA LIMITED143.95.234.71 (- United States)
2016-10-31 10:17Distribution SiteLocky
dapos.ru
REGRU-RU (n/a)
2016-10-31 03:54Payment SiteCerber
vyohacxzoue32vvk.6wkz70.bid
Eranet International Limited (n/a)
2016-10-30 21:36Botnet C&CLocky
wtxvmsikbmtbq.pw
Namecheap208.100.26.234 (- United States)
2016-10-30 21:36Botnet C&CLocky
185.5.250.135
185.5.250.135 (- Russian Federation)
2016-10-30 20:18Payment SiteCerber
ffoqr3ug7m726zou.wf912u.bid
Eranet International Limited (n/a)
2016-10-30 07:37Payment SiteCerber
ffoqr3ug7m726zou.0v7hry.bid
Eranet International Limited (n/a)
2016-10-29 12:29Payment SiteCerber
ffoqr3ug7m726zou.do9wwg.top
Eranet International Limited (n/a)
2016-10-29 11:37Payment SiteCerber
vyohacxzoue32vvk.34o9h1.bid
Eranet International Limited (n/a)
2016-10-29 10:05Payment SiteCerber
ahuqfrqk54v3vnzj.dxzr2l.top
Eranet International Limited (n/a)
2016-10-29 04:53Payment SiteCerber
xrhwryizf5mui7a5.g72xh8.top
Eranet International Limited (n/a)
2016-10-29 00:35Botnet C&CLocky
acjhwpdjhlhbncf.click
NAMECHEAP208.100.26.234 (- United States)
2016-10-28 16:24Botnet C&CLocky
yavmxpiqfwmubk.pw
Namecheap208.100.26.234 (- United States)
2016-10-28 16:07Botnet C&CLocky
wbaskcsxiffiax.info
Dynadot, LLC69.195.129.70 (- United States)
2016-10-28 14:51Payment SiteCerber
vyohacxzoue32vvk.0ot7em.bid
Eranet International Limited (n/a)
2016-10-28 13:51Payment SiteCerber
vyohacxzoue32vvk.roep3o.top
Eranet International Limited (n/a)
2016-10-28 11:58Distribution SiteLocky
zizicamarda.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.136.54.70 (- United States)
2016-10-28 11:57Distribution SiteLocky
payserairan.com
GODADDY.COM, LLC184.168.131.241 (- United States)
2016-10-28 11:57Distribution SiteLocky
bytextreme.com
WINGU NETWORKS, S.A DE C.V.67.23.228.176 (- United States)
2016-10-28 11:54Distribution SiteLocky
tradium.com.mx
NEUBOX Internet SA de CV207.210.232.7 (- United States)
2016-10-28 11:53Distribution SiteLocky
esnaftansatlik.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-10-28 11:52Distribution SiteLocky
blog.webskitters.com
BIGROCK SOLUTIONS LIMITED50.116.23.250 (- United States)
2016-10-28 11:51Distribution SiteLocky
2014.taktik-id.ch
METANET AG80.74.152.150 (- Switzerland)
2016-10-28 11:47Distribution SiteLocky
shreemahalaxmiagro.com
GODADDY.COM, LLC (n/a)
2016-10-28 11:46Distribution SiteLocky
armcoinfrared.com
GODADDY.COM, LLC66.117.14.109 (- United States)
2016-10-28 11:42Distribution SiteLocky
uscpl.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]132.148.24.162 (- United States)
2016-10-28 11:42Distribution SiteLocky
ecolotienda.com
ENOM, INC.67.23.237.79 (- United States)
2016-10-28 11:41Distribution SiteLocky
dmg-properties.com
GODADDY.COM, LLC107.180.54.255 (- United States)
2016-10-28 11:37Distribution SiteLocky
pr.moi.go.th
T.H.NIC Co., Ltd.103.28.100.4 (- Thailand)
2016-10-28 11:37Distribution SiteLocky
tcmrecipe.com
ENOM, INC.192.124.249.168 (- United States)
2016-10-28 11:37Distribution SiteLocky
energietool.susteen.nl
Byte B.V.83.217.81.140 (- Belgium)
2016-10-28 11:36Distribution SiteLocky
jasonvergara.com
CRAZY DOMAINS FZ-LLC163.53.229.3 (- Australia)
2016-10-28 11:34Distribution SiteLocky
givbee.com
GODADDY.COM, LLC107.154.105.168 (- United States) +1 A record(s) 107.154.106.168 (AS19551, - United States)
2016-10-28 11:33Distribution SiteLocky
charlesworth.com.ng
Upperlink Limited (n/a)
2016-10-28 11:33Distribution SiteLocky
brinktest.com
TUCOWS DOMAINS INC.69.28.199.70 (- Canada)
2016-10-28 11:32Distribution SiteLocky
site4.pulusajans.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-10-28 11:31Distribution SiteLocky
accessdr.com
ENOM, INC.192.254.155.83 (- United States)
2016-10-28 11:29Distribution SiteLocky
latiendadelalujuria.com
WINGU NETWORKS, S.A DE C.V.67.23.240.101 (- United States)
2016-10-28 11:24Distribution SiteLocky
sne.bydgoszcz.pl
Michau Enterprises Ltd.185.123.161.212 (- Poland)
2016-10-28 11:21Distribution SiteLocky
vitasave.ca
Go Daddy Domains Canada, Inc96.30.33.146 (- United States)
2016-10-28 11:20Distribution SiteLocky
modelpayments.net
WILD WEST DOMAINS, LLC (n/a)
2016-10-28 11:19Distribution SiteLocky
fshr.al
104.153.45.242 (- United States)
2016-10-28 11:18Distribution SiteLocky
mexusconsulting.com
WILD WEST DOMAINS, LLC199.34.228.59 (- United States)
2016-10-28 11:17Distribution SiteLocky
radiantstars.org
GoDaddy.com, LLC50.87.113.38 (- United States)
2016-10-28 11:17Distribution SiteLocky
accademiamoda.com
GODADDY.COM, LLC192.185.4.29 (- United States)
2016-10-28 11:17Distribution SiteLocky
empirek9.com
GODADDY.COM, LLC192.124.249.18 (- United States)
2016-10-28 11:16Distribution SiteLocky
thingsandsuch.co.uk
1 & 1 Internet SE217.160.0.8 (- Germany)
2016-10-28 11:16Distribution SiteLocky
ryseinteractive.com
FASTDOMAIN, INC.184.168.131.241 (- United States)
2016-10-28 11:15Distribution SiteLocky
88.150.144.236
n/a
2016-10-28 11:10Distribution SiteLocky
dominatetheplate.com
GODADDY.COM, LLC192.185.225.117 (- United States)
2016-10-28 11:10Distribution SiteLocky
chefsmart.com
GODADDY.COM, LLC35.241.19.142 (- United States)
2016-10-28 11:10Distribution SiteLocky
vintageprintable.com
GODADDY.COM, LLC (n/a)
2016-10-28 11:10Distribution SiteLocky
socialcampaigns.co.in
GoDaddy.com, LLC (R101-AFIN)78.46.110.14 (- Germany)
2016-10-28 11:05Distribution SiteLocky
walkprint.com
GODADDY.COM, LLC104.200.22.130 (- United States) +1 A record(s) 104.200.23.95 (AS63949, - United States)
2016-10-28 11:05Distribution SiteLocky
grandmar.nextmp.net
TUCOWS DOMAINS INC.192.64.53.192 (- United States)
2016-10-28 11:04Distribution SiteLocky
jobsdeed.com
GODADDY.COM, LLC184.168.221.52 (- United States)
2016-10-28 10:51Distribution SiteLocky
dolutesisat.com
NICS TELEKOMUNIKASYON TIC LTD. S[...] (n/a)
2016-10-28 10:50Distribution SiteLocky
rentadeplantaselectricas.com
WINGU NETWORKS, S.A DE C.V.67.23.237.79 (- United States)
2016-10-28 10:49Distribution SiteLocky
hellomissdance.com
CHENGDU FLY-DIGITAL TECHNOLOGY C[...]114.80.211.43 (- China)
2016-10-28 10:48Distribution SiteLocky
bikemielec.com
FASTDOMAIN, INC.178.32.149.185 (- Poland)
2016-10-28 10:47Distribution SiteLocky
agrobiciuffa.com.ar
146.66.80.219 (- United States)
2016-10-28 10:47Distribution SiteLocky
bruehwiler.ch
METANET AG80.74.152.150 (- Switzerland)
2016-10-28 10:47Distribution SiteLocky
clinicaharvard.com
TUCOWS DOMAINS INC.198.46.82.242 (- United States)
2016-10-28 10:47Distribution SiteLocky
vibrantdeal.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]178.128.155.112 (- Greece)
2016-10-28 10:47Distribution SiteLocky
00005ik.rcomhost.com
NETWORK SOLUTIONS, LLC.206.188.193.86 (- United States)
2016-10-28 10:46Distribution SiteLocky
cemiselbiseleri.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.71.216.35 (- Cyprus)
2016-10-28 10:46Distribution SiteLocky
joshdult.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-10-28 10:46Distribution SiteLocky
primermundo.net
TUCOWS DOMAINS INC.67.23.237.79 (- United States)
2016-10-28 10:45Distribution SiteLocky
zlotysalmo.net
KEY-SYSTEMS GMBH184.105.192.2 (- United States)
2016-10-28 10:44Distribution SiteLocky
lolitojr.com.mx
Interplanet S.A de C.V.67.23.237.79 (- United States)
2016-10-28 10:44Distribution SiteLocky
arc.com.pk
210.56.18.42 (- Pakistan)
2016-10-28 10:44Distribution SiteLocky
artmusic.dk
198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-10-28 10:43Distribution SiteLocky
chanet.jp
210.196.232.211 (- Japan)
2016-10-28 10:43Distribution SiteLocky
caraudiogdl.com
ENOM, INC. (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >