Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-09-07 10:36Botnet C&CLocky
91.247.37.137
91.247.37.137 (- Bulgaria)
2017-09-07 06:56Distribution SiteLocky
gclubrace.info
Eranet International Limited (n/a)
2017-09-07 06:55Distribution SiteLocky
karakascit.com
Nics Telekomunikasyon Tic Ltd. S[...]23.20.239.12 (- United States)
2017-09-07 06:55Distribution SiteLocky
lpdata.com
CSL Computer Service Langenbach [...]213.180.70.213 (- Sweden)
2017-09-06 17:47Payment SiteCerber
oqwygprskqv65j72.1j1x2b.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-06 15:01Distribution SiteLocky
paulcruse.com
Tucows Domains Inc.91.215.186.147 (- United Kingdom)
2017-09-06 15:00Distribution SiteLocky
homecarpetshopping.com
NetEarth One Inc. d/b/a NetEarth208.79.200.218 (- United States)
2017-09-06 15:00Distribution SiteLocky
culturando.org
Tucows Inc.31.11.32.26 (- Italy)
2017-09-06 12:30Distribution SiteLocky
chiguruedu.org
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2017-09-06 12:30Distribution SiteLocky
tealfortera.org
Todaynic.com, Inc. (n/a)
2017-09-05 11:52Payment SiteCerber
qfjhpgbefuhenjp7.17xukb.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-05 11:42Payment SiteCerber
oqwygprskqv65j72.17q8f6.top
Eranet International Limited127.0.0.1 (n/a)
2017-09-05 11:03Distribution SiteLocky
msanchez.com.au
Uber Australia E1 Pty Ltd (n/a)
2017-09-05 11:03Distribution SiteLocky
agrourbis.com
Arsys Internet, S.L. d/b/a NICLI[...]86.109.170.66 (- Spain)
2017-09-05 11:03Distribution SiteLocky
autoecolejeanluc.com
Gandi SAS178.20.66.207 (- France)
2017-09-05 11:03Distribution SiteLocky
finnigans.org.uk
Knightmaster Enterprises UK Ltd [...]87.117.242.30 (- United Kingdom)
2017-09-05 11:03Distribution SiteLocky
rccartrailers.com
eNom, Inc.66.199.174.108 (- Canada)
2017-09-05 11:02Distribution SiteLocky
auto-ecolecoccinelle.com
Gandi SAS (n/a)
2017-09-05 11:02Distribution SiteLocky
callt.co.uk
1 & 1 Internet SE87.106.104.155 (- United Kingdom)
2017-09-05 11:02Distribution SiteLocky
naturofind.org
Todaynic.com, Inc. (n/a)
2017-09-05 11:01Distribution SiteLocky
bjp.co.id
202.169.44.167 (- Indonesia)
2017-09-05 11:01Distribution SiteLocky
huismartens.be
Registrar.eu185.56.145.90 (- Netherlands)
2017-09-05 11:01Distribution SiteLocky
anstudio.it
WIDE-REG93.186.249.56 (- Italy)
2017-09-05 11:01Distribution SiteLocky
xploramail.com
Soluciones Corporativas IP, SL (n/a)
2017-09-05 11:01Distribution SiteLocky
amatoi.com
GMO Internet, Inc. dba Onamae.co[...]121.50.46.158 (- Japan)
2017-09-05 11:00Distribution SiteLocky
mistresspenny.co.uk
1 & 1 Internet SE87.106.145.218 (- Germany)
2017-09-05 11:00Distribution SiteLocky
domani.grol.ru
RU-CENTER-RU62.68.135.140 (- Russian Federation)
2017-09-05 11:00Distribution SiteLocky
technicolor-tes.org
CSC Corporate Domains, Inc.165.160.13.20 (- United States) +1 A record(s) 165.160.15.20 (AS19574, - United States)
2017-09-05 11:00Distribution SiteLocky
pamplonarecados.com
Soluciones Corporativas IP, SL5.2.88.79 (- Spain)
2017-09-05 11:00Distribution SiteLocky
pidara.nl
WebReus46.235.40.41 (- Netherlands)
2017-09-05 11:00Distribution SiteLocky
capedorato.com
1&1 Internet SE87.106.253.65 (- Germany)
2017-09-05 10:59Distribution SiteLocky
software-unlimited.at
213.208.134.145 (- Austria)
2017-09-05 10:59Distribution SiteLocky
autoecolebeconcentre.com
Gandi SAS178.20.66.207 (- France)
2017-09-05 10:59Distribution SiteLocky
ferienwohnung-schitter.at
217.172.186.114 (- Germany)
2017-09-05 10:59Distribution SiteLocky
gclubrace.info
Eranet International Limited (n/a)
2017-09-04 14:23Distribution SiteLocky
proyectogambia.com
1&1 Internet SE72.52.4.119 (- United States)
2017-09-04 14:23Distribution SiteLocky
handhi.com
Tucows Domains Inc.162.213.255.19 (- United States)
2017-09-04 14:23Distribution SiteLocky
jimaylor.net
Web Commerce Communications Limi[...]49.50.240.107 (- New Zealand)
2017-09-04 14:22Distribution SiteLocky
geolearner.com
1&1 Internet SE (n/a)
2017-09-04 14:22Distribution SiteLocky
m-tensou.net
Tucows Domains Inc.202.218.252.73 (- Japan)
2017-09-04 14:22Distribution SiteLocky
aquavista.org.nz
49.50.240.107 (- New Zealand)
2017-09-04 14:22Distribution SiteLocky
awholeblueworld.com
Tucows Domains Inc.66.36.173.215 (- United States)
2017-09-04 14:22Distribution SiteLocky
naturofind.org
Todaynic.com, Inc. (n/a)
2017-09-04 14:21Distribution SiteLocky
n1xua.com
GoDaddy.com, LLC (n/a)
2017-09-04 14:21Distribution SiteLocky
cabbiemail.com
TPP Wholesale Pty Ltd.221.121.150.42 (- Australia)
2017-09-04 09:56Distribution SiteLocky
www.pentahealthinstitute.com
GoDaddy.com, LLC (n/a)
2017-09-04 09:56Distribution SiteLocky
clubdeautores.es
176.31.253.102 (- France)
2017-09-04 09:56Distribution SiteLocky
animatoon.be
AutoDNS5.61.251.136 (- Netherlands)
2017-09-04 09:56Distribution SiteLocky
hard-grooves.com
Tucows Domains Inc. (n/a)
2017-09-04 09:55Distribution SiteLocky
calpadia.co.id
103.82.240.100 (- Indonesia)
2017-09-04 09:55Distribution SiteLocky
prescottinternet.net
GoDaddy.com, LLC166.62.123.214 (- United States)
2017-09-04 09:55Distribution SiteLocky
hellonwheelsthemovie.com
Tucows Domains Inc.66.36.165.149 (- United States)
2017-09-04 09:55Distribution SiteLocky
dueeffepromotion.com
eNom, Inc.89.96.90.14 (- Italy)
2017-09-04 09:55Distribution SiteLocky
mariamandrioli.com
GoDaddy.com, LLC (n/a)
2017-09-04 09:54Distribution SiteLocky
cogerea.net
Gandi SAS217.182.193.213 (- France)
2017-09-04 09:54Distribution SiteLocky
db-b-s.com
RegistryGate GmbH217.172.189.173 (- Germany)
2017-09-04 09:54Distribution SiteLocky
suncoastot.com
eNom, Inc.98.124.252.176 (- United States)
2017-09-04 09:54Distribution SiteLocky
autoecolecarces.com
Gandi SAS193.227.248.241 (- France)
2017-09-04 09:54Distribution SiteLocky
uvitacr.com
eNom, Inc.199.204.248.102 (- United States)
2017-09-04 09:53Distribution SiteLocky
qxr33qxr.com
Tucows Domains Inc.67.210.102.240 (- United States)
2017-09-04 09:53Distribution SiteLocky
autoecoleautonome.com
Gandi SAS (n/a)
2017-09-04 09:53Distribution SiteLocky
brownpa.net
Tucows Domains Inc.198.71.233.135 (- United States)
2017-09-01 19:42Botnet C&CLocky
82.202.221.108
82.202.221.108 (- Russian Federation)
2017-09-01 12:25Distribution SiteLocky
greenerlivingca.com
eNom, Inc.65.182.174.10 (- United States)
2017-09-01 12:24Distribution SiteLocky
telesolutionsconsultants.com
Register.com, Inc.65.182.174.10 (- United States)
2017-09-01 12:24Distribution SiteLocky
clazbrokerageservices.com
eNom, Inc.64.6.251.63 (- United States)
2017-09-01 12:24Distribution SiteLocky
sindeval.es
62.113.249.12 (- Germany)
2017-09-01 12:24Distribution SiteLocky
fls-portal.co.uk
ukfast.net Ltd t/a UKFast.Net Li[...] (n/a)
2017-09-01 12:24Distribution SiteLocky
richarddrakeconstruction.com
Tucows Domains Inc. (n/a)
2017-09-01 12:23Distribution SiteLocky
terae-lumiere.com
eNom, Inc.103.14.14.101 (- Japan)
2017-09-01 12:23Distribution SiteLocky
saunaesofmansatis.net
Nics Telekomunikasyon Tic Ltd. S[...] (n/a)
2017-09-01 12:23Distribution SiteLocky
paben.co.uk
Easyspace Ltd78.129.185.15 (- United Kingdom)
2017-09-01 12:23Distribution SiteLocky
rampagida.com.tr
94.103.38.183 (- Turkey)
2017-09-01 12:23Distribution SiteLocky
rs-consultores.pt
80.172.241.42 (- Portugal)
2017-09-01 12:22Distribution SiteLocky
expresopanama.com
GoDaddy.com, LLC97.107.133.224 (- United States)
2017-09-01 12:22Distribution SiteLocky
tractament-imatges.com
Soluciones Corporativas IP, SL (n/a)
2017-09-01 10:08Distribution SiteLocky
autoecole-jeanpierre.com
Gandi SAS217.70.184.38 (- France)
2017-09-01 07:28Distribution SiteLocky
geocean.co.id
103.58.102.38 (- Indonesia)
2017-09-01 07:28Distribution SiteLocky
givensplace.com
GoDaddy.com, LLC184.168.221.35 (- United States)
2017-09-01 07:28Distribution SiteLocky
gtdban.net
Eranet International Limited (n/a)
2017-08-31 12:23Distribution SiteLocky
graficasicarpearanjuez.com
eNom, Inc.185.18.197.109 (- Spain)
2017-08-31 12:23Distribution SiteLocky
hecam.de
83.169.22.79 (- Germany)
2017-08-31 12:22Distribution SiteLocky
gewinnspiel-sachsenhausen.de
194.173.175.16 (- Germany)
2017-08-31 12:22Distribution SiteLocky
greatesthits.mygoldmusic.com
TLDs, LLC dba SRSplus185.65.40.140 (- United Kingdom)
2017-08-31 12:22Distribution SiteLocky
futurehemp.com
GoDaddy.com, LLC74.115.33.242 (- United States)
2017-08-31 12:22Distribution SiteLocky
gestione.easyreplica.com
PDR Ltd. d/b/a PublicDomainRegis[...]62.4.8.233 (- France)
2017-08-31 12:22Distribution SiteLocky
hightechavenue.com
OVH (n/a)
2017-08-31 12:22Distribution SiteLocky
furukawa-iin.net
GMO Internet, Inc. dba Onamae.co[...]202.237.149.19 (- Japan)
2017-08-31 12:21Distribution SiteLocky
hdvmedia.nl
Registrar.eu91.209.7.116 (- Netherlands)
2017-08-31 12:21Distribution SiteLocky
vinneydropmodorfosius.net
Eranet International Limited (n/a)
2017-08-31 12:21Distribution SiteLocky
garage-fiat.be
AMEN.FR L Agence des MEdias Nume[...]81.88.57.68 (- Italy)
2017-08-31 12:21Distribution SiteLocky
gbass.ch
switchplus AG67.19.68.83 (- United States)
2017-08-31 12:21Distribution SiteLocky
goldenspikerails.net
Brandon Gray Internet Services, [...] (n/a)
2017-08-31 12:20Distribution SiteLocky
go-coo.jp
203.183.65.225 (- Japan)
2017-08-31 11:12Payment SiteCerber
oqwygprskqv65j72.1nzpby.top
Eranet International Limited127.0.0.1 (n/a)
2017-08-31 05:02Distribution SiteLocky
gbstamps4u.com
CSL Computer Service Langenbach [...]185.119.173.239 (- United Kingdom)
2017-08-31 05:02Distribution SiteLocky
gaiterosdemorella.com
Domain.com, LLC178.63.48.135 (- Germany)
2017-08-31 05:02Distribution SiteLocky
garijoabogados.com
PSI-USA, Inc. dba Domain Robot84.124.11.194 (- Spain)
2017-08-31 05:02Distribution SiteLocky
gesamaehler.de
87.106.6.47 (- Germany)
2017-08-31 05:02Distribution SiteLocky
gabriellesrestaurant.com
Register.com, Inc.207.58.143.135 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >