Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-29 21:45Payment SiteCerber
unocl45trpuoefft.ceikto.bid
Eranet International Limited (n/a)
2016-09-29 16:39Payment SiteCerber
wjtqjleommc4z46i.9ule2e.bid
Eranet International Limited (n/a)
2016-09-29 15:45Payment SiteCerber
wjtqjleommc4z46i.xjwlms.bid
Eranet International Limited (n/a)
2016-09-29 15:21Distribution SiteLocky
parroquiansg.org
PDR Ltd. d/b/a PublicDomainRegis[...]69.167.175.226 (- United States)
2016-09-29 15:05Payment SiteCerber
unocl45trpuoefft.ptneek.bid
Eranet International Limited (n/a)
2016-09-29 13:40Distribution SiteLocky
cmcomunicacion.es
89.187.85.5 (- United Kingdom)
2016-09-29 13:40Distribution SiteLocky
birthstory.com
TUCOWS DOMAINS INC.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-09-29 13:40Distribution SiteLocky
81millstreet.nl
TransIP BV (n/a)
2016-09-29 13:40Distribution SiteLocky
kelownatownhomes.com
ENOM, INC.98.124.199.89 (- United States)
2016-09-29 13:39Distribution SiteLocky
ampconnect.com
GODADDY.COM, LLC52.58.78.16 (- Germany)
2016-09-29 13:38Distribution SiteLocky
parentchildmothergoose.com
TUCOWS DOMAINS INC.107.154.146.153 (- United States) +1 A record(s) 45.60.96.153 (AS19551, - United States)
2016-09-29 13:38Distribution SiteLocky
demo.website.pl
Consulting Service Sp. z o.o.193.218.152.246 (- Poland)
2016-09-29 13:38Distribution SiteLocky
dedivan.ru
R01-RU92.53.118.53 (- Russian Federation)
2016-09-29 13:37Distribution SiteLocky
mediumsize.org
Tucows Inc.149.202.49.250 (- France)
2016-09-29 13:37Distribution SiteLocky
alliswelltour.com
CV. JOGJACAMP (n/a)
2016-09-29 13:37Distribution SiteLocky
gadget24.ro
Globe Hosting, Inc.185.165.185.116 (- Romania)
2016-09-29 13:36Distribution SiteLocky
econopaginas.com
NEUBOX INTERNET SA DE CV162.144.21.152 (- United States)
2016-09-29 13:35Distribution SiteLocky
sonajp.com
GODADDY.COM, LLC173.236.177.59 (- United States)
2016-09-29 13:35Distribution SiteLocky
unforgettabletymes.com
TPP WHOLESALE PTY LTD. (n/a)
2016-09-29 13:35Distribution SiteLocky
anhsaodem.info
GoDaddy.com, LLC (n/a)
2016-09-29 13:34Distribution SiteLocky
innogenap.com
TUCOWS DOMAINS INC.103.6.196.196 (- Malaysia)
2016-09-29 13:33Distribution SiteLocky
globalremoteservices.com
GODADDY.COM, LLC52.215.239.74 (- Ireland)
2016-09-29 13:33Distribution SiteLocky
opmsk.ru
REGTIME-RU95.211.252.73 (- Netherlands)
2016-09-29 13:33Distribution SiteLocky
slaterarts.com
GODADDY.COM, LLC184.168.221.50 (- United States)
2016-09-29 13:32Distribution SiteLocky
1gouw.com
XIN NET TECHNOLOGY CORPORATION (n/a)
2016-09-29 13:32Distribution SiteLocky
studiorif.ru
RU-CENTER-RU (n/a)
2016-09-29 11:22Payment SiteCerber
wjtqjleommc4z46i.pmnz7a.bid
Eranet International Limited (n/a)
2016-09-29 10:41Distribution SiteLocky
51steel.org
Xiamen ChinaSource Internet Serv[...]114.80.253.87 (- China)
2016-09-29 09:51Distribution SiteLocky
kitamachiweek.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]210.188.201.147 (- Japan)
2016-09-29 09:51Distribution SiteLocky
18901350711.com
CHENGDU WEST DIMENSION DIGITAL T[...]107.160.242.195 (- United States)
2016-09-29 09:51Distribution SiteLocky
immewrood.net
KEY-SYSTEMS GMBH (n/a)
2016-09-29 09:51Distribution SiteLocky
inspirationbydesire.com
CRAZY DOMAINS FZ-LLC (n/a)
2016-09-29 09:50Distribution SiteLocky
365jtoo.com
BEIJING INNOVATIVE LINKAGE TECHN[...]154.93.184.55 (- United States)
2016-09-29 09:50Distribution SiteLocky
wirelessdd.com
ONLINENIC, INC.27.254.62.242 (- Thailand)
2016-09-29 09:50Distribution SiteLocky
fhgmediaent.com
GODADDY.COM, LLC74.124.202.15 (- United States)
2016-09-29 09:50Distribution SiteLocky
cielitodrive.com
GODADDY.COM, LLC184.168.221.60 (- United States)
2016-09-29 09:49Distribution SiteLocky
5i5k.net
BEIJING INNOVATIVE LINKAGE TECHN[...] (n/a)
2016-09-29 09:49Distribution SiteLocky
antamduc.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]125.212.243.28 (- Vietnam)
2016-09-29 09:49Distribution SiteLocky
exonbalai.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:49Distribution SiteLocky
sewingwholesale.com
PARAGON INTERNET GROUP LTD T/A P[...]176.74.20.60 (- United Kingdom)
2016-09-29 09:49Distribution SiteLocky
supplyglassess.com
ENOM, INC. (n/a)
2016-09-29 09:48Distribution SiteLocky
ogeedfungo.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:48Distribution SiteLocky
olimp-otel.ru
REGTIME-RU176.9.41.237 (- Germany)
2016-09-29 09:48Distribution SiteLocky
viptabien.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]210.1.58.196 (- Thailand)
2016-09-29 09:48Distribution SiteLocky
khasitez.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:48Distribution SiteLocky
cyprusnike.com
DOMAIN.COM, LLC109.232.217.151 (- Turkey)
2016-09-29 09:48Distribution SiteLocky
cranioactive.com
FASTDOMAIN, INC.67.222.48.145 (- United States)
2016-09-29 09:48Distribution SiteLocky
a-we.com
GODADDY.COM, LLC52.69.108.146 (- Japan)
2016-09-29 09:47Distribution SiteLocky
109.73.234.241
n/a
2016-09-29 09:47Distribution SiteLocky
khasitez.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:47Distribution SiteLocky
knigoboz.ru
RU-CENTER-RU195.208.1.105 (- Russian Federation)
2016-09-29 09:47Distribution SiteLocky
abbiholland.com
TUCOWS DOMAINS INC.88.208.252.202 (- United Kingdom)
2016-09-29 09:47Distribution SiteLocky
kayooo.net
TUCOWS DOMAINS INC.185.23.21.18 (- Poland)
2016-09-29 09:47Distribution SiteLocky
columbiaprintingservices.com
GODADDY.COM, LLC192.186.254.41 (- United States)
2016-09-29 09:47Distribution SiteLocky
jscompuserve.com
TLDS, LLC DBA SRSPLUS66.147.242.192 (- United States)
2016-09-29 09:47Distribution SiteLocky
tolgaustun.com
REG2C.COM, INC. (n/a)
2016-09-29 09:46Distribution SiteLocky
3ddentalimage.com
FASTDOMAIN, INC.209.99.64.51 (- United States)
2016-09-29 09:45Distribution SiteLocky
59jd.com
GO FRANCE DOMAINS, LLC50.63.202.45 (- United States)
2016-09-29 09:45Distribution SiteLocky
rglogistic.com
DELUXE SMALL BUSINESS SALES, INC[...]198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-09-29 09:45Distribution SiteLocky
exonbalai.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:45Distribution SiteLocky
web4-magento.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-29 09:45Distribution SiteLocky
joventa.sk
212.57.32.97 (- Slovakia)
2016-09-29 09:45Distribution SiteLocky
ogeedfungo.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:44Distribution SiteLocky
0793mobile.com
BIZCN.COM, INC.172.120.62.107 (- United States)
2016-09-29 09:44Distribution SiteLocky
mayurinkorat.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-09-29 09:44Distribution SiteLocky
redegamb.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:43Distribution SiteLocky
immewrood.net
KEY-SYSTEMS GMBH (n/a)
2016-09-29 09:43Distribution SiteLocky
domaks-dom.ru
RU-CENTER-RU185.156.3.24 (- Russian Federation)
2016-09-29 09:43Distribution SiteLocky
londonmusicclub.com
TUCOWS DOMAINS INC.70.33.246.180 (- Canada)
2016-09-29 09:43Distribution SiteLocky
pthcu.org
OnlineNIC Inc.104.27.164.57 (- United States) +1 A record(s) 104.27.165.57 (AS13335, - United States)
2016-09-29 09:43Distribution SiteLocky
jetpcl.com
NETWORK SOLUTIONS, LLC.23.239.25.26 (- United States)
2016-09-29 09:42Distribution SiteLocky
szaloncukor.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.56.37.136 (- Hungary)
2016-09-29 09:42Distribution SiteLocky
baankonkoh.com
ONLINENIC, INC.210.1.58.38 (- Thailand)
2016-09-29 09:42Distribution SiteLocky
redegamb.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:42Distribution SiteLocky
hastarim.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-09-29 09:42Distribution SiteLocky
91ise.info
GoDaddy.com, LLC192.151.229.222 (- United States)
2016-09-29 08:18Payment SiteCerber
4kqd3hmqgptupi3p.meetbinds.pw
AlpNames Limited141.8.226.58 (- Switzerland)
2016-09-29 07:46Payment SiteCerber
4kqd3hmqgptupi3p.valueshes.bid
Alpnames Limited (n/a)
2016-09-29 07:22Distribution SiteLocky
digital-print.ru
RU-CENTER-RU188.225.77.198 (- Russian Federation)
2016-09-29 07:22Distribution SiteLocky
camangenep.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:22Distribution SiteLocky
gold-insurance.com
DOMAIN.COM, LLC109.232.217.151 (- Turkey)
2016-09-29 07:22Distribution SiteLocky
sakegawaya.com
TUCOWS DOMAINS INC.202.191.118.131 (- Japan)
2016-09-29 07:22Distribution SiteLocky
excellenceinmentoring.com
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-09-29 07:21Distribution SiteLocky
eynmyxa.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
portal.rimpro.ru
REGTIME-RU (n/a)
2016-09-29 07:21Distribution SiteLocky
hollandinternetservices.com
ENOM, INC.85.17.170.171 (- Netherlands)
2016-09-29 07:21Distribution SiteLocky
easyfo.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.148.143 (- Thailand)
2016-09-29 07:21Distribution SiteLocky
vicwulaw.com
GODADDY.COM, LLC160.153.32.34 (- United States)
2016-09-29 07:21Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC23.236.62.147 (- United States)
2016-09-29 07:21Distribution SiteLocky
etustime.com
ONLINENIC, INC. (n/a)
2016-09-29 07:21Distribution SiteLocky
etaaulos.com
KEY-SYSTEMS GMBH (n/a)
2016-09-29 07:21Distribution SiteLocky
lavalower.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
devzendo.org
eNom, Inc.212.53.86.27 (- United Kingdom)
2016-09-29 07:21Distribution SiteLocky
eynmyxa.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
cylooks.com
HANGANG SYSTEMS, INC. D/B/A DORE[...]221.143.46.199 (- Korea)
2016-09-29 07:21Distribution SiteLocky
aarontax.com
GODADDY.COM, LLC107.180.2.55 (- United States)
2016-09-29 07:21Distribution SiteLocky
prod23.ru
REGRU-RU (n/a)
2016-09-29 07:21Distribution SiteLocky
gelecekdiyarbakirsigorta.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.150.110 (- Turkey)
2016-09-29 07:21Distribution SiteLocky
healingwaterscc.com
GODADDY.COM, LLC69.175.70.186 (- United States)
2016-09-29 07:20Distribution SiteLocky
nikitassalon.com
ENOM, INC. (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >