Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-10-25 15:03Distribution SiteLocky
nhachonglu.org
PDR Ltd. d/b/a PublicDomainRegis[...]103.28.37.50 (- Vietnam)
2016-10-25 15:03Distribution SiteLocky
lamurindo.com
VODIEN INTERNET SOLUTIONS PTE LT[...]119.31.234.43 (- Singapore)
2016-10-25 15:02Distribution SiteLocky
70.32.93.234
n/a
2016-10-25 15:02Distribution SiteLocky
rws1.com.au
AussieHQ Pty Ltd27.121.67.125 (- Australia)
2016-10-25 15:02Distribution SiteLocky
dcorpconstructions.com.au
Web Address Registration27.124.117.1 (- Australia)
2016-10-25 15:02Distribution SiteLocky
therapymarketinginstitute.com
WILD WEST DOMAINS, LLC67.225.243.198 (- United States)
2016-10-25 15:01Distribution SiteLocky
saioffset.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-10-25 15:01Distribution SiteLocky
samuderaciptaraya.com
HOSTINGER UAB (n/a)
2016-10-25 15:01Distribution SiteLocky
abplhomes.com
GODADDY.COM, LLC207.174.215.153 (- United States)
2016-10-25 15:01Distribution SiteLocky
filesdiamond.com
NET 4 INDIA LIMITED118.67.249.196 (- India)
2016-10-25 15:01Distribution SiteLocky
kantoor.vescolub.nl
Realtime Register185.136.238.4 (- Netherlands)
2016-10-25 15:01Distribution SiteLocky
www.talentpal.in
Endurance Domains Technology Pvt[...]69.46.6.164 (- United States)
2016-10-25 15:00Distribution SiteLocky
www.softbdltd.com
ENOM, INC.162.241.217.186 (- United States)
2016-10-25 15:00Distribution SiteLocky
tvctraffic.com
GODADDY.COM, LLC206.189.176.78 (- United States)
2016-10-25 15:00Distribution SiteLocky
ascentgateacademy.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]111.118.215.222 (- India)
2016-10-25 15:00Distribution SiteLocky
www.primeknittexltd.com
ENOM, INC. (n/a)
2016-10-25 15:00Distribution SiteLocky
shopro.ir
176.9.51.14 (- Germany)
2016-10-25 14:59Distribution SiteLocky
www.greentools.com.tr
185.22.187.187 (- Turkey)
2016-10-25 14:59Distribution SiteLocky
baedalapp.com
LAUNCHPAD.COM, INC.108.167.140.84 (- United States)
2016-10-25 14:58Distribution SiteLocky
angorabric.org
Bizcn.com, Inc. (n/a)
2016-10-25 14:58Distribution SiteLocky
wivebeday.com
KEY-SYSTEMS GMBH104.239.157.210 (- United States) +1 A record(s) 23.253.126.58 (AS196763, - United States)
2016-10-25 14:58Distribution SiteLocky
tciislandguide.com
REGISTER.COM, INC.192.185.196.147 (- United States)
2016-10-25 14:58Distribution SiteLocky
workandplaytherapy.com
GODADDY.COM, LLC208.113.172.228 (- United States)
2016-10-25 14:57Distribution SiteLocky
newdesign.well.pk
(n/a)
2016-10-25 14:57Distribution SiteLocky
soft-bd.com
ENOM, INC.108.178.13.98 (- United States)
2016-10-25 14:57Distribution SiteLocky
lilxtreme.com
DOMAIN.COM, LLC198.54.114.239 (- United States)
2016-10-25 14:57Distribution SiteLocky
www.bfsa.gov.bd
198.54.120.18 (- United States)
2016-10-25 14:57Distribution SiteLocky
promo.worldloft.ru
REGRU-RU37.140.192.218 (- Russian Federation)
2016-10-25 14:57Distribution SiteLocky
gellyrepin.com
KEY-SYSTEMS GMBH (n/a)
2016-10-25 14:56Distribution SiteLocky
codeaweb.net
TUCOWS DOMAINS INC.74.124.210.121 (- United States)
2016-10-25 14:56Distribution SiteLocky
tutorarabia.com
GODADDY.COM, LLC (n/a)
2016-10-25 14:56Distribution SiteLocky
jciindia.in
Endurance Domains Technology Pvt[...]162.144.48.43 (- United States)
2016-10-25 14:56Distribution SiteLocky
gudangg.com
ENOM, INC. (n/a)
2016-10-25 14:55Distribution SiteLocky
www.kroyme.com
GODADDY.COM, LLC67.20.89.90 (- United States)
2016-10-25 14:55Distribution SiteLocky
alyatater.com
TUCOWS DOMAINS INC. (n/a)
2016-10-25 14:54Distribution SiteLocky
ablad.ma
HYPERTECH54.37.102.250 (- United States)
2016-10-25 14:54Distribution SiteLocky
copperfilters.com
NET 4 INDIA LIMITED204.11.56.48 (- Virgin Islands)
2016-10-25 14:54Distribution SiteLocky
galtechprojects.com
GODADDY.COM, LLC206.72.192.15 (- United States)
2016-10-25 14:54Distribution SiteLocky
zasm.info
Tucows Domains Inc.192.185.46.78 (- United States)
2016-10-25 14:54Distribution SiteLocky
sunwayautoparts.com
FASTDOMAIN, INC.67.20.110.214 (- United States)
2016-10-25 14:53Distribution SiteLocky
lookbeauty.ir
176.9.51.14 (- Germany)
2016-10-25 14:53Distribution SiteLocky
codefinder.co
TUCOWS DOMAINS INC.18.211.19.121 (- United States) +3 A record(s) 34.192.144.86 (AS34931, - United States)
54.209.1.255 (AS14618, - United States)
54.90.118.187 (AS14618, - United States)
2016-10-25 14:53Distribution SiteLocky
beaumontschool.com
TUCOWS DOMAINS INC.35.189.95.129 (- United States)
2016-10-25 14:53Distribution SiteLocky
greenresist.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-10-25 14:53Distribution SiteLocky
informing.asia
GoDaddy.com, LLC R45-ASIA (146) (n/a)
2016-10-25 14:53Distribution SiteLocky
69.162.74.116
n/a
2016-10-25 14:53Distribution SiteLocky
www.jockytours.com
LAUNCHPAD.COM, INC.192.185.34.61 (- United States)
2016-10-25 14:52Distribution SiteLocky
easytravelvault.com
CRAZY DOMAINS FZ-LLC101.0.117.102 (- Australia)
2016-10-25 14:52Distribution SiteLocky
uatsa.cl
107.180.127.207 (- United States)
2016-10-25 14:52Distribution SiteLocky
vicampro.com
WEB4AFRICA INC169.255.59.10 (- South Africa)
2016-10-25 14:52Distribution SiteLocky
www.ifs-b.org
eNom, Inc.198.54.120.18 (- United States)
2016-10-25 14:52Distribution SiteLocky
angelwap.ro
NAV COMMUNICATIONS SRL185.179.157.0 (- Romania)
2016-10-25 14:52Distribution SiteLocky
elitednadt.com
GODADDY.COM, LLC198.54.115.8 (- United States)
2016-10-25 14:51Distribution SiteLocky
216.104.188.249
n/a
2016-10-25 14:51Distribution SiteLocky
cultural-ecology.com
TUCOWS DOMAINS INC.50.87.225.139 (- United States)
2016-10-25 14:51Distribution SiteLocky
faisal-ibrahim.info
Cloud Group Limited45.33.10.191 (- United States)
2016-10-25 14:51Distribution SiteLocky
103.27.52.92
n/a
2016-10-25 14:51Distribution SiteLocky
tacunair.com
TUCOWS DOMAINS INC. (n/a)
2016-10-25 14:50Distribution SiteLocky
mahendradesai.net
FASTDOMAIN, INC.66.147.244.113 (- United States)
2016-10-25 14:50Distribution SiteLocky
www.russwat.org
PDR Ltd. d/b/a PublicDomainRegis[...]23.226.131.177 (- United States)
2016-10-25 14:50Distribution SiteLocky
dziennikarze.lo-kolaczyce.pl
Consulting Service Sp. z o.o. (n/a)
2016-10-25 14:50Distribution SiteLocky
www.fireballindia.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]108.179.209.90 (- United States)
2016-10-25 14:50Distribution SiteLocky
njykvalve.com
XIAMEN CHINASOURCE INTERNET SERV[...] (n/a)
2016-10-25 14:50Distribution SiteLocky
dreamtheatre.co
GODADDY.COM, INC.91.197.230.235 (- United Kingdom)
2016-10-25 14:50Distribution SiteLocky
megapowercash.com
GODADDY.COM, LLC107.180.47.13 (- United States)
2016-10-25 14:49Distribution SiteLocky
dev.indonesiatextile.id
(n/a)
2016-10-25 14:49Distribution SiteLocky
fpi-canada.com
ENOM, INC. (n/a)
2016-10-25 14:49Distribution SiteLocky
soulanimtech.com
GODADDY.COM, LLC (n/a)
2016-10-25 14:49Distribution SiteLocky
privatestashstorage.com
FASTDOMAIN, INC. (n/a)
2016-10-25 14:49Distribution SiteLocky
emreker.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-10-25 07:20Payment SiteCerber
ahuqfrqk54v3vnzj.kj3f52.bid
Eranet International Limited (n/a)
2016-10-25 01:08Botnet C&CLocky
fqtdrnqmeofknd.biz
DYNADOT LLC69.195.129.70 (- United States)
2016-10-24 19:43Payment SiteCerber
ahuqfrqk54v3vnzj.h4lu4i.bid
Eranet International Limited (n/a)
2016-10-24 19:00Payment SiteCerber
vyohacxzoue32vvk.7a07br.bid
Eranet International Limited (n/a)
2016-10-24 11:52Payment SiteCerber
lfdachijzuwx4bc4.zreknv.bid
Eranet International Limited (n/a)
2016-10-24 10:40Distribution SiteLocky
omnibusiness-solutions.com
ENOM, INC.74.124.210.121 (- United States)
2016-10-24 10:40Distribution SiteLocky
sowkinah.com
KEY-SYSTEMS GMBH (n/a)
2016-10-24 06:05Payment SiteCerber
ahuqfrqk54v3vnzj.l7g2sv.bid
Eranet International Limited (n/a)
2016-10-24 05:49Botnet C&CLocky
bwcfinnt.work
Namecheap208.100.26.234 (- United States)
2016-10-24 05:43Payment SiteCerber
lfdachijzuwx4bc4.twyjdx.bid
Eranet International Limited (n/a)
2016-10-24 05:27Payment SiteCerber
lfdachijzuwx4bc4.e6cf2t.bid
Eranet International Limited (n/a)
2016-10-23 21:31Payment SiteCerber
vyohacxzoue32vvk.zn90h4.bid
Eranet International Limited (n/a)
2016-10-23 12:20Payment SiteCerber
lfdachijzuwx4bc4.w4629d.top
Eranet International Limited (n/a)
2016-10-23 10:05Botnet C&CLocky
185.102.136.77
185.102.136.77 (- Russian Federation)
2016-10-23 06:50Botnet C&CCryptoWall
chong.joelle.free.fr
ONLINE SAS212.27.63.110 (- France)
2016-10-23 02:36Payment SiteCerber
xrhwryizf5mui7a5.jhrb5a.top
Eranet International Limited (n/a)
2016-10-22 01:36Payment SiteCerber
lfdachijzuwx4bc4.tx0igu.bid
Eranet International Limited (n/a)
2016-10-21 11:37Payment SiteCerber
lfdachijzuwx4bc4.le2brr.bid
Eranet International Limited (n/a)
2016-10-21 07:23Payment SiteCerber
ffoqr3ug7m726zou.8uvtsg.top
Eranet International Limited (n/a)
2016-10-20 13:48Payment SiteCerber
lfdachijzuwx4bc4.u9fcji.bid
Eranet International Limited (n/a)
2016-10-20 13:37Botnet C&CLocky
91.200.14.124
91.200.14.124 (- Ukraine)
2016-10-20 08:54Payment SiteCerber
xrhwryizf5mui7a5.uw9x7z.bid
Eranet International Limited (n/a)
2016-10-19 23:26Payment SiteCerber
xrhwryizf5mui7a5.50mb1c.bid
Eranet International Limited (n/a)
2016-10-19 23:14Payment SiteCerber
lfdachijzuwx4bc4.8dlgyg.bid
Eranet International Limited (n/a)
2016-10-19 21:51Payment SiteCerber
vyohacxzoue32vvk.8g1k17.bid
Eranet International Limited (n/a)
2016-10-19 17:50Payment SiteCerber
lfdachijzuwx4bc4.eujvrw.bid
Eranet International Limited (n/a)
2016-10-19 15:47Payment SiteCerber
lfdachijzuwx4bc4.m7f27y.bid
Eranet International Limited (n/a)
2016-10-19 15:27Payment SiteCerber
lfdachijzuwx4bc4.ex9n9v.top
Eranet International Limited (n/a)
2016-10-18 11:18Payment SiteCerber
unocl45trpuoefft.ukwnvw.bid
Eranet International Limited (n/a)
2016-10-18 01:37Payment SiteCerber
lfdachijzuwx4bc4.x4tk5c.bid
Eranet International Limited (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >