Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-03-22 12:21Botnet C&CTeslaCrypt
masterlegue.com
TUCOWS DOMAINS INC.62.210.83.56 (- France)
2016-03-22 11:11Botnet C&CTeslaCrypt
toolaria.com
GODADDY.COM, LLC160.153.49.102 (- United States)
2016-03-22 08:25Botnet C&CLocky
92.63.87.106
92.63.87.106 (- Latvia)
2016-03-22 07:24Payment SiteTeslaCrypt
8b4bb47tiaolhy4uhhlfaqerg.sofarany.at
(n/a)
2016-03-21 13:50Botnet C&CTeslaCrypt
tradinbow.com
OVH213.186.33.104 (- France)
2016-03-21 13:03Botnet C&CLocky
217.12.199.90
217.12.199.90 (- Ukraine)
2016-03-21 06:52Payment SiteTeslaCrypt
irudhkunrlfu25fhkaqw34blr5qlby4tgq43t.orrisbirth.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-21 06:51Payment SiteTeslaCrypt
g4dhhg53jsdjnnkjwjrfyiouh3o4u4th.vinerteen.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-21 06:48Payment SiteTeslaCrypt
74nfnjhlq45nkgws4hbdbk45wekfjhqw4talefgnv.curryfort.at
(n/a)
2016-03-21 03:08Botnet C&CLocky
nwcpgymgh.work
Regtime5.34.183.21 (- Ukraine)
2016-03-20 09:08Botnet C&CTeslaCrypt
mkis.org
Register.com, Inc.50.87.127.96 (- United States)
2016-03-19 23:39Botnet C&CPayCrypt
promedia.co.in
GoDaddy.com, LLC (R101-AFIN)192.185.21.126 (- United States)
2016-03-19 17:54Botnet C&CLocky
46.148.20.46
46.148.20.46 (- Ukraine)
2016-03-19 15:10Botnet C&CTeslaCrypt
commonsenseprotection.com
GODADDY.COM, LLC50.116.109.230 (- United States)
2016-03-19 08:09Payment SiteTeslaCrypt
94dbhbj3l4blaeyfgl7q45glbaer.giponfeste.at
(n/a)
2016-03-19 08:09Payment SiteTeslaCrypt
uhufnlsad7bhf4ykqfbevmxergwrth.himfinn.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-18 18:32Botnet C&CLocky
accemfsqovkd.pw
Namecheapn/a
2016-03-18 17:51Botnet C&CTeslaCrypt
classemgmt.testbada.com
MEGAZONE CORP. DBA HOSTING.KR115.94.157.252 (- Korea)
2016-03-18 14:59Botnet C&CTeslaCrypt
exaltation.info
Key-Systems GmbH46.235.47.104 (- Netherlands)
2016-03-18 14:10Payment SiteTeslaCrypt
h5nuwefkuh134ljngkasdbasfg.corolbugan.com
KEY-SYSTEMS GMBH216.218.135.114 (- United States)
2016-03-18 14:04Payment SiteTeslaCrypt
p54dhkus4tlkfashdb6vjetgsdfg.greetingshere.at
(n/a)
2016-03-18 13:56Payment SiteTeslaCrypt
f4dsbjhb45wfiuqeib4fkqeg.meccaledgy.at
(n/a)
2016-03-18 13:34Botnet C&CTeslaCrypt
resumosdenovela.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]108.167.185.237 (- United States)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GODADDY.COM, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GODADDY.COM, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GODADDY.COM, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)
2016-03-17 23:57Botnet C&CCryptoWall
bolizarsospos.com
GoDaddy.com, LLC195.157.15.100 (- United Kingdom)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >