Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-02-05 05:35Botnet C&CCryptoWall
ascortimisoara.ro
ICI - ROTLD86.105.207.51 (- Romania)
2016-02-04 22:49Botnet C&CTeslaCrypt
zavidovodom.com
ENOM, INC.78.110.50.137 (- Russian Federation)
2016-02-03 15:07Botnet C&CTeslaCrypt
southinstrument.org
Key-Systems GmbH212.85.98.241 (- Poland)
2016-02-01 20:17Botnet C&CTeslaCrypt
westhollywooddentaloffice.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-02-01 20:17Botnet C&CTeslaCrypt
wefindco.com
GODADDY.COM, LLC (n/a)
2016-02-01 06:07Botnet C&CTeslaCrypt
surusegitimmerkezi.com
NICS TELEKOMUNIKASYON TICARET LT[...]94.73.151.173 (- Turkey)
2016-01-30 23:01Botnet C&CCryptoWall
8vs.com
ENAME TECHNOLOGY CO., LTD.162.212.35.42 (- United States)
2016-01-30 22:59Botnet C&CCryptoWall
glitchygaming.com
ENOM, INC.72.51.43.203 (- United States)
2016-01-30 12:47Botnet C&CCryptoWall
grochowina.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.116.35.23 (- Poland)
2016-01-30 11:34Botnet C&CCryptoWall
tcblog.de
212.90.148.111 (- Germany)
2016-01-27 10:28Botnet C&CCryptoWall
dining-bar.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]203.189.109.152 (- Japan)
2016-01-27 08:58Botnet C&CCryptoWall
london-escorts-agency.org.uk
Namesco Limited178.32.72.112 (- United Kingdom)
2016-01-26 06:17Botnet C&CCryptoWall
event-travel.co.uk
eNom, Inc.178.32.72.113 (- United Kingdom)
2016-01-26 06:03Botnet C&CCryptoWall
mangohills.net
ONLINENIC, INC.107.170.239.172 (- United States)
2016-01-25 23:27Botnet C&CCryptoWall
jadwalpialadunia.in
Crazy Domains FZ-LLC (R160-AFIN)104.219.251.2 (- United States)
2016-01-25 19:54Botnet C&CCryptoWall
aspectdesigns.com.au
NetRegistry101.2.169.10 (- Australia)
2016-01-23 00:38Botnet C&CCryptoWall
inspirenetworks.in
Webiq Domains Solutions Pvt. Ltd[...]103.10.191.39 (- India)
2016-01-21 02:47Botnet C&CCryptoWall
cheapshirts.us
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]123.30.187.106 (- Vietnam)
2016-01-20 13:20Botnet C&CCryptoWall
bktrade.kiev.ua
ua.freehost178.20.153.56 (- Ukraine)
2016-01-20 02:30Botnet C&CCryptoWall
patrianossa.com.br
23.89.198.195 (- United States)
2016-01-20 02:06Botnet C&CCryptoWall
silstop.pl
AZ.pl Sp. z o.o.46.41.144.45 (- Poland)
2016-01-18 10:01Botnet C&CCryptoWall
portalmaismidia.com.br
(n/a)
2016-01-16 09:23Botnet C&CCryptoWall
weberteam.hu
195.228.152.23 (- Hungary)
2016-01-14 11:17Botnet C&CCryptoWall
www.gjscomputerservices.com.au
NetRegistry125.214.74.70 (- Australia)
2016-01-14 11:17Botnet C&CCryptoWall
procrediti.com.ua
ua.nic62.109.23.126 (- Russian Federation)
2016-01-14 08:59Botnet C&CCryptoWall
ilovesport.kiev.ua
ua.ukraine185.68.16.13 (- Ukraine)
2016-01-13 09:46Botnet C&CCryptoWall
babylicious.ie
89.36.25.168 (- Europe)
2016-01-11 19:12Botnet C&CCryptoWall
fun-pop.com
SHANGHAI YOVOLE NETWORKS INC. (n/a)
2016-01-09 06:13Botnet C&CCryptoWall
d3mpd.fe.uns.ac.id
203.6.149.68 (- Indonesia)
2016-01-01 22:39Botnet C&CCryptoWall
icsot.na.its.ac.id
202.46.129.104 (- Indonesia)
2015-12-30 20:38Botnet C&CCryptoWall
kvnysoho.com
GODADDY.COM, LLC50.62.88.95 (- United States)
2015-12-29 20:36Botnet C&CCryptoWall
emprende21.es
185.37.226.57 (- Spain)
2015-12-21 22:06Botnet C&CCryptoWall
kuruyaprak.com
NICS TELEKOMUNIKASYON TICARET LT[...]178.33.84.115 (- France)
2015-12-17 03:14Botnet C&CCryptoWall
ample-sun.eu
Mesh Digital Limited104.28.31.181 (- United States)
2015-12-13 15:43Botnet C&CCryptoWall
allstarpaintbody.com
TUCOWS DOMAINS INC.64.207.146.127 (- United States)
2015-12-11 17:49Botnet C&CCryptoWall
arttoday.sk
92.240.253.3 (- Slovakia)
2015-12-10 08:36Botnet C&CCryptoWall
7-eleven-handbags.com
CHENGDU WEST DIMENSION DIGITAL T[...]23.89.109.22 (- United States)
2015-12-01 20:46Botnet C&CCryptoWall
balkanium.altervista.org
Tucows Inc.104.28.22.51 (- United States)
2015-11-26 10:11Botnet C&CCryptoWall
arot.altervista.org
Tucows Inc.104.28.15.54 (- United States)
2015-11-14 16:40Botnet C&CCryptoWall
avancarvisual.com.br
189.26.236.163 (- Brazil)
2015-11-14 16:40Botnet C&CCryptoWall
anime-tuner.square7.ch
INWX AG (n/a)
2015-11-11 09:40Botnet C&CCryptoWall
www.weddingsonthefrenchriviera.com
INTERNET DOMAIN SERVICE BS CORP80.247.225.181 (- France)
2015-11-11 09:40Botnet C&CCryptoWall
www.taoblu.com
TUCOWS DOMAINS INC.62.149.140.94 (- Italy)
2015-11-10 04:09Botnet C&CCryptoWall
imagescameraclub.com
GoDaddy.com, LLC184.168.47.225 (- United States)
2015-11-07 16:04Botnet C&CCryptoWall
naimselmonaj.com
Name.com, Inc. (n/a)
2015-11-07 09:53Botnet C&CTeslaCrypt
worldinoneplace.info
GoDaddy.com, LLC184.168.47.225 (- United States)
2015-11-05 01:23Botnet C&CCryptoWall
markossolomon.com
ENOM, INC. (n/a)
2015-10-29 06:25Botnet C&CCryptoWall
allreadytravel.com
GoDaddy.com, LLC108.167.140.175 (- United States)
2015-10-28 03:41Botnet C&CCryptoWall
boilersandfurnaces.com
GoDaddy.com, LLC108.167.140.175 (- United States)
2015-10-28 03:41Botnet C&CCryptoWall
bigboattravel.com
GoDaddy.com, LLC108.167.140.175 (- United States)
2015-10-27 22:50Botnet C&CCryptoWall
beachhouseplans.com
eNom, Inc.98.124.199.18 (- United States)
2015-10-27 17:29Botnet C&CCryptoWall
airconditioning12601.com
GoDaddy.com, LLC108.167.140.175 (- United States)
2015-10-13 18:01Botnet C&CCryptoWall
mmcomposite.dk
185.21.41.107 (- Denmark)
2015-09-27 16:26Botnet C&CCryptoWall
elcoachingempresarial.com
GODADDY.COM, LLC50.87.144.134 (- United States)
2015-09-27 15:49Botnet C&CCryptoWall
genedillardart.com
FASTDOMAIN, INC.69.89.21.66 (- United States)
2015-09-27 07:58Botnet C&CCryptoWall
dillardvideo.com
FASTDOMAIN, INC.69.89.21.66 (- United States)
2015-09-07 06:27Botnet C&CCryptoWall
foundersomaha.net
GoDaddy.com, LLC50.63.42.1 (- United States)
2015-08-26 04:12Botnet C&CCryptoWall
connectao.com
OVH192.232.223.73 (- United States)
2015-07-09 10:35Botnet C&CCryptoWall
appeum.com
GoDaddy.com, LLC50.62.71.1 (- United States)
2015-06-18 01:11Botnet C&CLocky
91.223.88.205
91.223.88.205 (- Ukraine)
2015-04-15 14:00Botnet C&CCryptoWall
marcortes.com
OVH91.134.158.216 (- France)
2015-04-03 10:09Botnet C&CCryptoWall
tutorialswalk.info
GoDaddy.com, LLC91.227.220.125 (- United Kingdom)
2015-03-30 09:57Botnet C&CCryptoWall
daffamedia.com
MAFF Inc.156.237.138.234 (- United States)
2015-03-07 13:46Botnet C&CCryptoWall
drdigitalmd.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]192.210.234.140 (- United States)
2015-03-04 12:10Botnet C&CCryptoWall
rajsima87.com
eNom, Inc. (n/a)
2015-03-02 04:14Botnet C&CCryptoWall
jauregia.net
TECNOCRATICA CENTRO DE DATOS, S.[...]185.92.246.115 (- Spain)
2015-03-02 01:18Botnet C&CCryptoWall
lzclient.com
eNom, Inc. (n/a)

# of rows displayed: 67
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >