Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-27 05:12Distribution SiteLocky
digital-print.ru
RU-CENTER-RU188.225.77.198 (- Russian Federation)
2016-09-27 05:11Distribution SiteLocky
zheng-du.com
HICHINA ZHICHENG TECHNOLOGY LTD.104.216.38.78 (- United States)
2016-09-27 05:11Distribution SiteLocky
on-point.be
IOP bvba83.217.71.2 (- Belgium)
2016-09-27 05:11Distribution SiteLocky
hlh.sk
80.94.52.24 (- Slovakia)
2016-09-27 05:11Distribution SiteLocky
clsss.ru
R01-RU (n/a)
2016-09-27 05:10Distribution SiteLocky
uredosafe.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:10Distribution SiteLocky
imagillaboration.org
FastDomain Inc.69.172.201.153 (- United States)
2016-09-27 05:10Distribution SiteLocky
residencyradio.com
ENOM, INC.204.11.56.48 (- Virgin Islands)
2016-09-27 05:10Distribution SiteLocky
specnaz-ars.ru
NAUNET-RU81.177.6.231 (- Russian Federation)
2016-09-27 05:09Distribution SiteLocky
floridaautostereo.com
GODADDY.COM, LLC184.168.221.83 (- United States)
2016-09-27 05:09Distribution SiteLocky
liteklighting.com
BIZCN.COM, INC.124.173.68.69 (- China)
2016-09-27 05:09Distribution SiteLocky
social-jump.com
GOOGLE INC. (n/a)
2016-09-27 05:09Distribution SiteLocky
xceramics.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]216.172.169.168 (- United States)
2016-09-27 05:09Distribution SiteLocky
musicbarpriatelia.sk
217.67.30.55 (- Slovakia)
2016-09-27 05:08Distribution SiteLocky
infotecx.com
CRAZY DOMAINS FZ-LLC209.212.158.66 (- United States)
2016-09-27 05:08Distribution SiteLocky
mischiefexpeditions.asia
PT ARDH Global Indonesia R209-AS[...] (n/a)
2016-09-27 05:08Distribution SiteLocky
sudep-registry.org
eNom, Inc.198.185.159.144 (- United States) +3 A record(s) 198.185.159.145 (AS53831, - United States)
198.49.23.144 (AS53831, - United States)
198.49.23.145 (AS53831, - United States)
2016-09-27 05:08Distribution SiteLocky
yourwellnessprescription.com
FASTDOMAIN, INC.162.241.218.49 (- United States)
2016-09-27 05:08Distribution SiteLocky
thomasduncanwatt.com
CRAZY DOMAINS FZ-LLC112.140.180.24 (- Australia)
2016-09-27 05:07Distribution SiteLocky
genealogy.su
RUCENTER-REG-FID89.253.254.74 (- Russian Federation)
2016-09-27 05:07Distribution SiteLocky
unmewpongo.com
KEY-SYSTEMS GMBH (n/a)
2016-09-27 05:07Distribution SiteLocky
judgedeborahshallcross.com
NETWORK SOLUTIONS, LLC. (n/a)
2016-09-27 05:07Distribution SiteLocky
presidenthotelthailand.com
ONLINENIC, INC.122.155.1.65 (- Thailand)
2016-09-27 05:07Distribution SiteLocky
limaxmesse.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-27 05:06Distribution SiteLocky
simo62.web.fc2.com
INSTRA CORPORATION PTY, LTD.104.244.99.16 (- United States)
2016-09-27 05:06Distribution SiteLocky
cast4all.com
REGISTER.COM, INC.23.236.62.147 (- United States)
2016-09-27 05:06Distribution SiteLocky
prod23.ru
REGRU-RU (n/a)
2016-09-27 05:04Distribution SiteLocky
vktechs.com
GODADDY.COM, LLC166.62.28.102 (- United States)
2016-09-27 05:04Distribution SiteLocky
lomtalay.com
ONLINENIC, INC.119.59.99.30 (- Thailand)
2016-09-27 05:04Distribution SiteLocky
ensaenerji.com
ONLINENIC, INC.185.149.103.162 (- Turkey)
2016-09-27 05:04Distribution SiteLocky
voizplus.com
ONLINENIC, INC.210.1.51.164 (- Thailand)
2016-09-27 05:04Distribution SiteLocky
rennie-mackintosh-jewellery.co.uk
123-Reg Limited t/a 123-reg192.124.249.4 (- United States)
2016-09-27 05:03Distribution SiteLocky
mokinukai.lt
UAB "Interneto vizija"79.98.26.175 (- Lithuania)
2016-09-27 05:03Distribution SiteLocky
greenshootmedia.com
GODADDY.COM, LLC192.124.249.18 (- United States)
2016-09-27 05:02Distribution SiteLocky
room8008.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]104.24.116.69 (- United States) +1 A record(s) 104.24.117.69 (AS46015, - United States)
2016-09-27 05:02Distribution SiteLocky
vlog24h.com
NAMESILO, LLC173.236.170.219 (- United States)
2016-09-27 05:02Distribution SiteLocky
serwing.com
GODADDY.COM, LLC23.20.239.12 (- United States)
2016-09-27 05:01Distribution SiteLocky
resboiu.ro
ICI - ROTLD89.44.138.57 (- Romania)
2016-09-27 02:58Payment SiteCerber
unocl45trpuoefft.piy4l3.bid
Eranet International Limited (n/a)
2016-09-27 02:45Payment SiteCerber
unocl45trpuoefft.v50gtu.bid
Eranet International Limited (n/a)
2016-09-26 23:01Payment SiteCerber
52uo5k3t73ypjije.li8wfu.bid
Eranet International Limited (n/a)
2016-09-26 21:07Payment SiteCerber
unocl45trpuoefft.vi5iko.bid
Eranet International Limited (n/a)
2016-09-26 20:32Payment SiteCerber
52uo5k3t73ypjije.ku824r.bid
Eranet International Limited (n/a)
2016-09-26 16:15Payment SiteCerber
4kqd3hmqgptupi3p.mi3596.bid
Eranet International Limited (n/a)
2016-09-26 13:28Botnet C&CLocky
185.86.78.3
185.86.78.3 (- Ukraine)
2016-09-25 15:55Payment SiteCerber
4kqd3hmqgptupi3p.byeraser.lol
Alpnames Limited (n/a)
2016-09-25 12:31Payment SiteCerber
unocl45trpuoefft.wl8t6k.bid
Eranet International Limited (n/a)
2016-09-25 10:04Botnet C&CLocky
5.196.200.247
5.196.200.247 (- France)
2016-09-24 21:40Botnet C&CLocky
tswsgajtwhqkosd.su
REGRU-REG-FID91.239.235.130 (- Ukraine)
2016-09-24 21:40Botnet C&CLocky
jfmiondv.xyz
Registrar of Domain Names REG.RU[...]91.239.235.130 (- Ukraine)
2016-09-24 19:34Payment SiteCerber
wjtqjleommc4z46i.zclhx9.bid
Eranet International Limited (n/a)
2016-09-24 18:20Payment SiteCerber
52uo5k3t73ypjije.l6ry3h.bid
Eranet International Limited (n/a)
2016-09-24 17:14Botnet C&CLocky
xofguhypjgvxrm.pw
Namecheap208.100.26.234 (- United States)
2016-09-24 17:13Payment SiteCerber
52uo5k3t73ypjije.9cd81s.bid
Eranet International Limited (n/a)
2016-09-24 12:11Payment SiteCerber
4kqd3hmqgptupi3p.sitcalls.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-24 07:31Payment SiteCerber
wjtqjleommc4z46i.nnbdlh.bid
Eranet International Limited (n/a)
2016-09-24 01:50Payment SiteCerber
4kqd3hmqgptupi3p.holescase.pw
AlpNames Limited141.8.226.58 (- Switzerland)
2016-09-23 18:24Payment SiteCerber
52uo5k3t73ypjije.v9y6z8.bid
Eranet International Limited (n/a)
2016-09-23 17:39Payment SiteCerber
unocl45trpuoefft.c4issd.bid
Eranet International Limited (n/a)
2016-09-23 16:53Payment SiteCerber
52uo5k3t73ypjije.ye42cp.bid
Eranet International Limited (n/a)
2016-09-23 11:29Distribution SiteLocky
melbourneacousticduo.com
TUCOWS DOMAINS INC.116.90.59.25 (- Australia)
2016-09-23 11:29Distribution SiteLocky
mahboob-e-rehmani.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]74.119.239.234 (- United States)
2016-09-23 11:28Distribution SiteLocky
bro4.com
NETWORK SOLUTIONS, LLC.74.220.199.9 (- United States)
2016-09-23 11:27Distribution SiteLocky
autorijschoolpedro.nl
GoDaddy.com37.48.108.22 (- Netherlands)
2016-09-23 11:27Distribution SiteLocky
rentalcartours.net
FASTDOMAIN, INC.143.95.226.54 (- United States)
2016-09-23 11:22Distribution SiteLocky
tmcaster.com
INTERNET DOMAIN SERVICE BS CORP185.162.9.62 (- Netherlands)
2016-09-23 11:22Distribution SiteLocky
rutlandhall.com
DOMAIN.COM, LLC35.190.198.111 (- United States)
2016-09-23 11:22Distribution SiteLocky
analeoni.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]195.210.46.17 (- Kazakhstan)
2016-09-23 11:21Distribution SiteLocky
colagens.com
GRANSY S.R.O D/B/A SUBREG.CZ (n/a)
2016-09-23 11:21Distribution SiteLocky
demo.dhrutidesign.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-23 11:20Distribution SiteLocky
iran-shik.ir
(n/a)
2016-09-23 11:19Distribution SiteLocky
ftpandina.atv.com.pe
NIC .PE190.81.57.204 (- Peru)
2016-09-23 11:18Distribution SiteLocky
purebanquet.com
GODADDY.COM, LLC (n/a)
2016-09-23 11:18Distribution SiteLocky
vmastera.ru
REGRU-RU85.17.89.54 (- Netherlands)
2016-09-23 11:18Distribution SiteLocky
alabamataskforce1.com
ENOM, INC.184.168.221.53 (- United States)
2016-09-23 11:17Distribution SiteLocky
welovekgc.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.38.80 (- Thailand)
2016-09-23 11:17Distribution SiteLocky
attractionhairandbeauty.com
GODADDY.COM, LLC23.236.62.147 (- United States)
2016-09-23 11:16Distribution SiteLocky
sotorentals.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]185.14.58.18 (- Spain)
2016-09-23 11:15Distribution SiteLocky
www.sikharaprojects.com
NET 4 INDIA LIMITED103.247.98.219 (- India)
2016-09-23 11:15Distribution SiteLocky
cignitech.com
GODADDY.COM, LLC34.224.46.161 (- United States) +1 A record(s) 52.72.46.198 (AS19551, - United States)
2016-09-23 11:15Distribution SiteLocky
gokmasan.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.124.5.33 (- Turkey)
2016-09-23 11:14Distribution SiteLocky
cynonnet.com
ONLINENIC, INC. (n/a)
2016-09-23 11:12Distribution SiteLocky
azerltd.com
WEB COMMERCE COMMUNICATIONS LIMI[...]103.57.190.35 (- Malaysia)
2016-09-23 11:10Distribution SiteLocky
nokianshop.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]194.28.172.101 (- Ukraine)
2016-09-23 11:10Distribution SiteLocky
fcafrica.org
Key-Systems GmbH94.231.109.244 (- Denmark)
2016-09-23 11:08Distribution SiteLocky
ecoledesalsa.com
GODADDY.COM, LLC192.186.239.68 (- United States)
2016-09-23 11:08Distribution SiteLocky
teknodate.com
KEY-SYSTEMS GMBH107.167.38.235 (- United States)
2016-09-23 09:47Distribution SiteLocky
imprentaonline365.es
(n/a)
2016-09-23 09:43Distribution SiteLocky
allcateringservices.in
Endurance Domains Technology Pvt[...]50.116.93.98 (- United States)
2016-09-23 09:43Distribution SiteLocky
annurmaheshphotography.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-23 09:43Distribution SiteLocky
basicsclothingco.com
GODADDY.COM, LLC132.148.133.51 (- United States)
2016-09-23 09:39Distribution SiteLocky
www.alfajerdecor.com
GODADDY.COM, LLC43.240.65.71 (- India)
2016-09-23 09:39Distribution SiteLocky
www.jmetalloysllp.com
GODADDY.COM, LLC (n/a)
2016-09-23 09:37Distribution SiteLocky
www.hdbrts.co.in
Endurance Domains Technology Pvt[...] (n/a)
2016-09-23 09:36Distribution SiteLocky
plafam.org.ve
169.53.21.71 (- United States)
2016-09-23 09:35Distribution SiteLocky
dev.gdia.com.vhost.zerolag.com
NETWORK SOLUTIONS, LLC.142.54.236.80 (- United States)
2016-09-23 09:35Distribution SiteLocky
iranmall.org
OnlineNIC Inc.37.156.29.231 (- Iran)
2016-09-23 09:35Distribution SiteLocky
www.studiotushar.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-09-23 09:33Distribution SiteLocky
artgalleryliquidation.com
NAME.COM, INC. (n/a)
2016-09-23 09:33Distribution SiteLocky
jmetalloysllp.com
GODADDY.COM, LLC (n/a)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >