Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2017-06-06 19:50Botnet C&CSage
mbfce24rgn65bx3g.17b3o.net
PAKNIC (PRIVATE) LIMITED184.73.106.115 (- United States) +71 A record(s) 34.211.105.108 (AS16509, - United States)
34.211.186.123 (AS16509, - United States)
46.173.218.250 (AS47196, - Russian Federation)
49.51.33.219 (AS132203, - China)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - )
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86 (AS, n/a)
2017-06-05 02:23Botnet C&CSage
mbfce24rgn65bx3g.2igu316.com
WEB COMMERCE COMMUNICATIONS LIMI[...]184.73.106.115 (- United States) +71 A record(s) 34.211.105.108 (AS16509, - United States)
34.211.186.123 (AS16509, - United States)
46.173.218.250 (AS47196, - Russian Federation)
49.51.33.219 (AS132203, - China)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS14618, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - United States)
52.90.86.146 (AS, - )
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86.146 (AS, n/a)
52.90.86 (AS, n/a)
2017-05-17 11:14Botnet C&CSage
mbfce24rgn65bx3g.je9mlz.com
WEB COMMERCE COMMUNICATIONS LIMI[...]13.58.12.165 (- United States) +10 A record(s) 184.73.106.115 (AS14618, - United States)
185.17.121.6 (AS28753, - Russian Federation)
34.211.105.108 (AS16509, - United States)
34.211.186.123 (AS16509, - United States)
46.173.218.250 (AS47196, - Russian Federation)
46.173.218.97 (AS47196, - Russian Federation)
47.91.127.246 (AS45102, - Canada)
49.51.33.219 (AS132203, - China)
52.90.86.146 (AS14618, - United States)
54.89.88.5 (AS14618, - United States)
2017-05-06 10:23Botnet C&CSage
mbfce24rgn65bx3g.eho23d.net
PAKNIC (PRIVATE) LIMITED13.58.12.165 (- United States) +10 A record(s) 184.73.106.115 (AS14618, - United States)
185.17.121.6 (AS28753, - Russian Federation)
34.211.105.108 (AS16509, - United States)
34.211.186.123 (AS16509, - United States)
46.173.218.250 (AS47196, - Russian Federation)
46.29.161.2 (AS51659, - Russian Federation)
47.91.127.246 (AS45102, - Canada)
49.51.33.219 (AS132203, - China)
52.90.86.146 (AS14618, - United States)
54.89.88.5 (AS14618, - United States)

# of rows displayed: 4
# of entries in database: 12'863