Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-02-17 20:03Botnet C&CCryptoWall
www.chemes.eu
Agnat Sp. z o.o.193.239.44.116 (- Poland)
2016-10-23 06:50Botnet C&CCryptoWall
chong.joelle.free.fr
ONLINE SAS212.27.63.110 (- France)
2016-07-12 15:54Botnet C&CCryptoWall
audetlaw.com
GODADDY.COM, LLC72.10.54.86 (- United States)
2016-06-24 19:58Botnet C&CCryptoWall
kahverengider.org
FBS Inc.185.150.128.26 (- Turkey)
2016-06-24 19:58Botnet C&CCryptoWall
businessaviators.com
TUCOWS DOMAINS INC.209.193.73.67 (- United States)
2016-03-29 18:19Botnet C&CCryptoWall
estudiobarco.com.ar
50.22.11.55 (- United States)
2016-03-12 09:43Botnet C&CCryptoWall
oregonreversemortgage.com
NAMEPAL.COM, LLC198.143.138.43 (- United States)
2016-03-12 09:43Botnet C&CCryptoWall
jambola.com
123-REG LIMITED208.109.189.88 (- United States)
2016-03-10 06:39Botnet C&CCryptoWall
gibdd.ws
Regtime.net Ltd.178.208.83.11 (- Russian Federation)
2016-03-10 06:39Botnet C&CCryptoWall
anoukdelecluse.nl
Hosting2GO B.V.83.137.194.20 (- Netherlands)
2016-03-09 17:40Botnet C&CCryptoWall
marciogerhardtsouza.com.br
186.202.153.14 (- Brazil)
2016-03-06 21:49Botnet C&CCryptoWall
www.decorandoimoveis.com
ENOM, INC.198.154.250.33 (- United States)
2016-03-06 21:49Botnet C&CCryptoWall
openroadsolutions.com
GODADDY.COM, LLC208.109.243.37 (- United States)
2016-03-05 16:26Botnet C&CCryptoWall
tusrecetas.net
GODADDY.COM, LLC69.162.104.22 (- United States)
2016-03-05 11:59Botnet C&CCryptoWall
trion.com.ph
104.238.111.90 (- United States)
2016-03-04 14:29Botnet C&CCryptoWall
hamilton150.co.nz
167.88.167.10 (- United States)
2016-03-03 11:35Botnet C&CCryptoWall
takaram.ir
82.102.8.142 (- Portugal)
2016-03-02 14:08Botnet C&CCryptoWall
americancorner.udp.cl
200.14.85.32 (- Chile)
2016-03-01 05:21Botnet C&CCryptoWall
challengestrata.com.au
Web Address Registration175.107.181.167 (- Australia)
2016-03-01 05:21Botnet C&CCryptoWall
dichiro.com
NETWORK SOLUTIONS, LLC.206.188.193.93 (- United States)
2016-03-01 01:03Botnet C&CCryptoWall
beyondthedog.net
GODADDY.COM, LLC184.168.47.225 (- United States)
2016-02-28 21:57Botnet C&CCryptoWall
lazymoosestamping.com
ENOM, INC.173.225.189.5 (- United States)
2016-02-28 21:37Botnet C&CCryptoWall
maternalserenity.co.uk
eNom, Inc.69.10.56.10 (- United States)
2016-02-27 11:53Botnet C&CCryptoWall
www.vishvagujarat.com
GODADDY.COM, LLC104.27.142.99 (- United States)
2016-02-27 11:53Botnet C&CCryptoWall
igatha.com
GODADDY.COM, LLC217.23.12.215 (- Netherlands)
2016-02-27 11:53Botnet C&CCryptoWall
cursos.feyda.net
NETWORK SOLUTIONS, LLC.198.154.228.128 (- United States)
2016-02-27 00:21Botnet C&CCryptoWall
best-service.jp
203.145.230.194 (- Japan)
2016-02-26 00:23Botnet C&CCryptoWall
viralcrazies.com
ENOM, INC.46.166.187.64 (- Netherlands)
2016-02-25 21:44Botnet C&CCryptoWall
eatside.es
134.0.15.35 (- Spain)
2016-02-25 21:44Botnet C&CCryptoWall
double-wing.de
217.119.54.152 (- Germany)
2016-02-25 21:44Botnet C&CCryptoWall
domaine-cassillac.com
OVH213.186.33.87 (- France)
2016-02-25 16:30Botnet C&CCryptoWall
recaswine.ro
ICI - ROTLD93.118.36.235 (- Romania)
2016-02-25 16:30Botnet C&CCryptoWall
ecocalsots.com
TECNOCRATICA CENTRO DE DATOS, S.[...]37.247.125.42 (- Spain)
2016-02-25 16:30Botnet C&CCryptoWall
definitionen.de
136.243.69.220 (- Germany)
2016-02-25 14:35Botnet C&CCryptoWall
nupleta.com.br
186.202.127.236 (- Brazil)
2016-02-25 08:26Botnet C&CCryptoWall
national-drafting.com
GODADDY.COM, LLC166.62.93.187 (- United States)
2016-02-24 18:36Botnet C&CCryptoWall
haarsaloncindy.nl
Mijn InternetOplossing B.V.5.178.65.43 (- Netherlands)
2016-02-23 11:26Botnet C&CCryptoWall
feuerwehr-stadt-riesa.de
178.254.50.156 (- Germany)
2016-02-23 11:26Botnet C&CCryptoWall
www.rippedknees.co.uk
123-Reg Limited t/a 123-reg212.48.68.63 (- United Kingdom)
2016-02-23 11:26Botnet C&CCryptoWall
www.hanoiguidedtours.com
NHAN HOA SOFTWARE COMPANY LTD104.131.43.146 (- United States)
2016-02-23 11:26Botnet C&CCryptoWall
takatei.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]203.189.109.240 (- Japan)
2016-02-23 11:26Botnet C&CCryptoWall
paintituppottery.com
IN2NET NETWORK, INC.208.117.38.143 (- United States)
2016-02-22 23:43Botnet C&CCryptoWall
ecolux-comfort.com
DOMAINCONTEXT, INC.188.127.249.243 (- Russian Federation)
2016-02-22 21:39Botnet C&CCryptoWall
building.msu.ac.th
T.H.NIC Co., Ltd.202.28.32.20 (- Thailand)
2016-02-22 21:39Botnet C&CCryptoWall
www.granmarquise.com.br
187.18.184.70 (- Brazil)
2016-02-22 21:39Botnet C&CCryptoWall
konyavakfi.nl
RAPIDE Internet91.208.60.158 (- Netherlands)
2016-02-22 21:39Botnet C&CCryptoWall
abdal.com.ua
ua.ukraine185.68.16.196 (- Ukraine)
2016-02-20 13:37Botnet C&CCryptoWall
frame3d.de
178.254.10.169 (- Germany)
2016-02-20 11:21Botnet C&CCryptoWall
autohaus-seevetal.com
CRONON AG81.169.145.162 (- Germany)
2016-02-20 11:21Botnet C&CCryptoWall
www.healthstafftravel.com.au
GoDaddy.com, LLC64.207.186.229 (- United States)
2016-02-20 11:21Botnet C&CCryptoWall
bisofit.com
ONLINENIC, INC.185.68.16.111 (- Ukraine)
2016-02-19 16:13Botnet C&CCryptoWall
aditaborai.com.br
108.179.192.88 (- United States)
2016-02-19 05:13Botnet C&CCryptoWall
theassemblyguy.co.nz
103.40.81.47 (- New Zealand)
2016-02-19 05:13Botnet C&CCryptoWall
www.001edizioni.com
TUCOWS DOMAINS INC.95.110.230.190 (- Italy)
2016-02-13 19:53Botnet C&CCryptoWall
madisonbootcamps.com
GODADDY.COM, LLC50.63.64.23 (- United States)
2016-02-13 09:12Botnet C&CCryptoWall
millsmanagement.nl
Hosting2GO B.V.83.137.194.38 (- Netherlands)
2016-02-13 01:15Botnet C&CCryptoWall
nonnuoccaobang.com
P.A. VIET NAM COMPANY LIMITED113.52.45.94 (- Vietnam)
2016-02-10 18:46Botnet C&CCryptoWall
italyprego.com
GODADDY.COM, LLC78.110.50.154 (- Russian Federation)
2016-02-10 02:18Botnet C&CCryptoWall
www.kadinweb.net
NICS TELEKOMUNIKASYON TICARET LT[...]185.8.33.117 (- Turkey)
2016-02-08 22:32Botnet C&CCryptoWall
www.plexipr.com
ENOM, INC.65.98.35.114 (- United States)
2016-02-08 06:09Botnet C&CCryptoWall
www.bishopbell.co.uk
123-Reg Limited t/a 123-reg217.177.8.89 (- United Kingdom)
2016-02-08 05:56Botnet C&CCryptoWall
studiolegalecsb.it
REGISTER-REG104.47.161.9 (- United States)
2016-02-08 05:54Botnet C&CCryptoWall
smartnote.co
WILD WEST DOMAINS, INC.184.168.68.65 (- United States)
2016-02-06 20:05Botnet C&CCryptoWall
dechehang.com
HICHINA ZHICHENG TECHNOLOGY LTD.112.124.96.107 (- China)
2016-02-06 08:22Botnet C&CCryptoWall
www.feddoctor.com
GODADDY.COM, LLC192.163.206.61 (- United States)
2016-02-05 16:59Botnet C&CCryptoWall
portret-tekening.nl
Hosting2GO B.V.83.137.194.115 (- Netherlands)
2016-02-05 05:35Botnet C&CCryptoWall
ascortimisoara.ro
ICI - ROTLD86.105.207.51 (- Romania)
2016-01-30 23:01Botnet C&CCryptoWall
8vs.com
ENAME TECHNOLOGY CO., LTD.162.212.35.42 (- United States)
2016-01-30 22:59Botnet C&CCryptoWall
glitchygaming.com
ENOM, INC.72.51.43.203 (- United States)
2016-01-30 12:47Botnet C&CCryptoWall
grochowina.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.116.35.23 (- Poland)
2016-01-30 11:34Botnet C&CCryptoWall
tcblog.de
212.90.148.111 (- Germany)
2016-01-27 10:28Botnet C&CCryptoWall
dining-bar.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]203.189.109.152 (- Japan)
2016-01-27 08:58Botnet C&CCryptoWall
london-escorts-agency.org.uk
Namesco Limited178.32.72.112 (- France)
2016-01-26 06:17Botnet C&CCryptoWall
event-travel.co.uk
eNom, Inc.178.32.72.113 (- France)
2016-01-26 06:03Botnet C&CCryptoWall
mangohills.net
ONLINENIC, INC.107.170.239.172 (- United States)
2016-01-25 23:27Botnet C&CCryptoWall
jadwalpialadunia.in
Crazy Domains FZ-LLC (R160-AFIN)104.219.251.2 (- United States)
2016-01-25 19:54Botnet C&CCryptoWall
aspectdesigns.com.au
NetRegistry101.2.169.10 (- Australia)
2016-01-23 00:38Botnet C&CCryptoWall
inspirenetworks.in
Webiq Domains Solutions Pvt. Ltd[...]103.10.191.39 (- India)
2016-01-21 02:47Botnet C&CCryptoWall
cheapshirts.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]123.30.187.106 (- Vietnam)
2016-01-20 13:20Botnet C&CCryptoWall
bktrade.kiev.ua
ua.freehost178.20.153.56 (- Ukraine)
2016-01-20 02:30Botnet C&CCryptoWall
patrianossa.com.br
23.89.198.195 (- United States)
2016-01-20 02:06Botnet C&CCryptoWall
silstop.pl
AZ.pl Sp. z o.o.46.41.144.45 (- Poland)
2016-01-18 10:01Botnet C&CCryptoWall
portalmaismidia.com.br
69.162.96.195 (- United States)
2016-01-16 09:23Botnet C&CCryptoWall
weberteam.hu
195.228.152.23 (- Hungary)
2016-01-14 11:17Botnet C&CCryptoWall
www.gjscomputerservices.com.au
NetRegistry125.214.74.70 (- Australia)
2016-01-14 11:17Botnet C&CCryptoWall
procrediti.com.ua
ua.nic62.109.23.126 (- Russian Federation)
2016-01-14 08:59Botnet C&CCryptoWall
ilovesport.kiev.ua
ua.ukraine185.68.16.13 (- Ukraine)
2016-01-13 09:46Botnet C&CCryptoWall
babylicious.ie
89.36.25.168 (- Romania)
2016-01-11 19:12Botnet C&CCryptoWall
fun-pop.com
SHANGHAI YOVOLE NETWORKS INC.121.40.201.95 (- China)
2016-01-09 06:13Botnet C&CCryptoWall
d3mpd.fe.uns.ac.id
203.6.149.68 (- Indonesia)
2016-01-01 22:39Botnet C&CCryptoWall
icsot.na.its.ac.id
202.46.129.104 (- Indonesia)
2015-12-29 20:36Botnet C&CCryptoWall
emprende21.es
185.37.226.57 (- Spain)
2015-12-29 19:54Botnet C&CCryptoWall
k264.hu
87.229.51.98 (- Hungary)
2015-12-21 22:06Botnet C&CCryptoWall
kuruyaprak.com
NICS TELEKOMUNIKASYON TICARET LT[...]178.33.84.115 (- France)
2015-12-13 15:43Botnet C&CCryptoWall
allstarpaintbody.com
TUCOWS DOMAINS INC.64.207.146.127 (- United States)
2015-12-11 17:49Botnet C&CCryptoWall
arttoday.sk
92.240.253.3 (- Slovakia)
2015-12-10 08:36Botnet C&CCryptoWall
7-eleven-handbags.com
CHENGDU WEST DIMENSION DIGITAL T[...]23.89.109.22 (- United States)
2015-12-01 20:46Botnet C&CCryptoWall
balkanium.altervista.org
Tucows Inc.104.28.22.51 (- United States)
2015-11-26 10:11Botnet C&CCryptoWall
arot.altervista.org
Tucows Inc.104.28.15.54 (- United States)
2015-11-14 16:40Botnet C&CCryptoWall
avancarvisual.com.br
189.26.236.163 (- Brazil)
2015-11-14 16:40Botnet C&CCryptoWall
anime-tuner.square7.ch
INWX AG148.251.48.69 (- Germany)
2015-11-11 09:40Botnet C&CCryptoWall
www.weddingsonthefrenchriviera.com
INTERNET DOMAIN SERVICE BS CORP80.247.225.181 (- France)
2015-11-11 09:40Botnet C&CCryptoWall
www.taoblu.com
TUCOWS DOMAINS INC.62.149.140.94 (- Italy)
2015-11-05 01:23Botnet C&CCryptoWall
markossolomon.com
ENOM, INC.192.185.4.117 (- United States)
2015-10-13 18:01Botnet C&CCryptoWall
mmcomposite.dk
185.21.41.107 (- Denmark)
2015-03-07 13:46Botnet C&CCryptoWall
drdigitalmd.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.210.234.140 (- United States)
2015-03-02 04:14Botnet C&CCryptoWall
jauregia.net
TECNOCRATICA CENTRO DE DATOS, S.[...]185.92.246.115 (- Spain)
2012-02-27 19:38Botnet C&CCryptoWall
bidr.trellian.com
ABOVE.COM PTY LTD.103.224.182.206 (- Australia)

# of rows displayed: 108
# of entries in database: 9'210