Tracker
Ransomware Tracker to distinguishes between the following threats:
- Ransomware botnet Command & Control servers (C&Cs)
- Ransomware Payment Sites
- Ransomware Distribution Sites
Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:
- TeslaCrypt
- CryptoWall (if you do want to know more about CryptoWall, check out CryptoWall Tracker)
- TorrentLocker
- PadCrypt
- Locky
- CTB-Locker
- FAKBEN
- PayCrypt
New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.
Search
You can search for a host or URL using the following search form:
Set a filter for the list below
Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.
General filters: Remove filter (Show all) | Online hosts
Filter by threat: | |
Filter by malware: | | | | | | | | | | |
Dateadded (UTC) | Threat | Malware | Host (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not. Red = Online Green = Offline Grey = Unknown) | Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.) | IP address (ASN, Country) |
---|---|---|---|---|---|
2016-11-22 12:42 | xa12580.com | HICHINA ZHICHENG TECHNOLOGY LTD. | 47.93.120.117 (![]() | ||
2016-11-22 12:42 | verdianthy.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | (n/a) | ||
2016-11-22 12:42 | luanasahian.ro | Romarg SRL | (n/a) | ||
2016-11-22 12:42 | mckains.net | GODADDY.COM, LLC | (n/a) | ||
2016-11-22 12:42 | huduanjichuang.com | BIZCN.COM, INC. | 173.234.51.46 (![]() | ||
2016-11-22 12:42 | warisstyle.com | JIANGSU BANGNING SCIENCE & TECHN[...] | 104.27.130.9 (![]() ![]() | ||
2016-11-22 12:41 | gumorca.com | NEUBOX INTERNET SA DE CV | 199.191.50.140 (![]() | ||
2016-11-22 12:41 | hjertearken.dk | (n/a) | |||
2016-11-22 12:41 | marvicedo.com | 1&1 INTERNET SE | 89.187.85.10 (![]() | ||
2016-11-22 12:41 | dmsoinfo.com | ENOM, INC. | 209.200.154.50 (![]() | ||
2016-11-22 12:41 | kuponik.eu | Michau Enterprises Limited | 136.243.50.2 (![]() | ||
2016-11-22 12:41 | robertocostama.com | ENOM, INC. | 186.202.153.91 (![]() | ||
2016-11-22 12:41 | newautolatino.com | WILD WEST DOMAINS, LLC | 204.11.56.48 (![]() | ||
2016-11-22 12:41 | hancebile.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 12:40 | interdean.hu | 95.131.66.24 (![]() | |||
2016-11-22 12:40 | lifanpower.pl | nazwa.pl sp. z o.o. | 94.130.51.151 (![]() | ||
2016-11-22 12:40 | lp511.com | HICHINA ZHICHENG TECHNOLOGY LTD. | 216.127.168.220 (![]() | ||
2016-11-22 12:40 | ulmustway.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 12:39 | microsupport.net | ASCIO TECHNOLOGIES, INC. DANMARK[...] | (n/a) | ||
2016-11-22 12:39 | reoilmaya.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 12:39 | mybankofgold.com | INSTRA CORPORATION PTY, LTD. | 213.136.88.141 (![]() | ||
2016-11-22 12:39 | rsahosting.com | ENOM, INC. | 143.95.246.177 (![]() | ||
2016-11-22 12:38 | hancebile.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 12:38 | convertus.com | GODADDY.COM, LLC | 216.129.207.43 (![]() | ||
2016-11-22 12:38 | gtodo.com.ar | 200.110.156.67 (![]() | |||
2016-11-22 12:38 | thegioitructuyen.org | P.A. Viet Nam Company Limited | 103.7.41.15 (![]() | ||
2016-11-22 12:38 | mcmustard.com | REGISTER.COM, INC. | 192.124.249.7 (![]() | ||
2016-11-22 12:38 | maxifitness.ru | REGRU-RU | 91.218.229.10 (![]() | ||
2016-11-22 12:38 | facerecognition.com.ba | 195.222.33.161 (![]() | |||
2016-11-22 12:37 | jazz.kvalitne.cz | REG-STABLE | 185.64.219.5 (![]() | ||
2016-11-22 12:37 | dtinsani.com | ONLINENIC, INC. | 175.103.55.72 (![]() | ||
2016-11-22 12:37 | sadhekoala.com | KEY-SYSTEMS GMBH | (n/a) | ||
2016-11-22 12:36 | sbdma.com | ENOM, INC. | 187.45.240.4 (![]() | ||
2016-11-22 12:36 | gxaiq.com | CHENGDU WEST DIMENSION DIGITAL T[...] | 219.234.6.204 (![]() | ||
2016-11-22 12:36 | natalija.ru | R01-RU | 217.112.42.86 (![]() | ||
2016-11-22 12:36 | mooymedia.nl | Fast DRS | 188.227.200.134 (![]() | ||
2016-11-22 12:35 | kabele.ru | RU-CENTER-RU | 195.28.183.183 (![]() | ||
2016-11-22 12:35 | i12.ir | 185.94.97.250 (![]() | |||
2016-11-22 12:35 | melzer-casting.de | (n/a) | |||
2016-11-22 12:35 | illinoisnavhda.org | BRANDON GRAY INTERNET SERVICES I[...] | 198.185.159.144 (![]() ![]() 198.49.23.144 (AS53831, ![]() 198.49.23.145 (AS53831, ![]() | ||
2016-11-22 12:35 | bursacicekmagazasi.com | REG2C.COM, INC. | 188.124.24.242 (![]() | ||
2016-11-22 12:35 | kstm.or.th | T.H.NIC Co., Ltd. | (n/a) | ||
2016-11-22 12:35 | poltec.com.au | Web Address Registration | (n/a) | ||
2016-11-22 12:34 | lomtalay.com | ONLINENIC, INC. | 119.59.99.30 (![]() | ||
2016-11-22 12:34 | pattumalamatha.com | GODADDY.COM, LLC | (n/a) | ||
2016-11-22 12:34 | touroflimassol.com | 1&1 INTERNET SE | 74.208.236.161 (![]() | ||
2016-11-22 12:34 | megalingeriemall.com | GODADDY.COM, LLC | (n/a) | ||
2016-11-22 12:34 | wbakerpsych.com | ENOM, INC. | (n/a) | ||
2016-11-22 12:34 | sdwsgs.com | HICHINA ZHICHENG TECHNOLOGY LTD. | 107.148.64.247 (![]() | ||
2016-11-22 12:34 | adoptshawm.net | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 12:33 | lumitech.ro | ICI - ROTLD | 188.241.152.101 (![]() | ||
2016-11-22 12:33 | snehil.com | GODADDY.COM, LLC | (n/a) | ||
2016-11-22 12:33 | woodmode-eg.com | DOMAIN.COM, LLC | 69.30.221.122 (![]() | ||
2016-11-22 12:33 | korbastudio.com | NETART SP Z O.O | 185.204.218.214 (![]() | ||
2016-11-22 12:33 | campossa.com | EURODNS S.A | 83.217.74.164 (![]() | ||
2016-11-22 12:32 | gto-cro.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 104.27.168.253 (![]() ![]() | ||
2016-11-22 12:32 | remixsarkilar.com | NAME.COM, INC. | 108.61.19.11 (![]() | ||
2016-11-22 12:32 | jkshea.com | NETEARTH ONE INC. D/B/A NETEARTH | (n/a) | ||
2016-11-22 12:32 | phaseiv.org | Network Solutions, LLC | 198.71.232.3 (![]() | ||
2016-11-22 12:32 | maroeg.com | WILD WEST DOMAINS, LLC | (n/a) | ||
2016-11-22 12:31 | irandivinggroup.com | TUCOWS DOMAINS INC. | 78.129.132.132 (![]() | ||
2016-11-22 12:30 | csplane.com | GODADDY.COM, LLC | 72.55.186.12 (![]() | ||
2016-11-22 12:30 | touroflimassol.com | 1&1 INTERNET SE | 74.208.236.161 (![]() | ||
2016-11-22 12:30 | vedexpert.com | REGIONAL NETWORK INFORMATION CEN[...] | 78.46.52.118 (![]() | ||
2016-11-22 12:30 | whatsapphd.com | GODADDY.COM, LLC | 204.11.56.48 (![]() | ||
2016-11-22 12:30 | oualili.org | FastDomain Inc. | (n/a) | ||
2016-11-22 12:29 | rndled.com | HICHINA ZHICHENG TECHNOLOGY LTD. | 45.196.104.180 (![]() | ||
2016-11-22 12:29 | ulmustway.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 12:29 | valpit.ru | RU-CENTER-RU | 109.70.26.37 (![]() ![]() | ||
2016-11-22 08:31 | langzhong8.com | CHENGDU WEST DIMENSION DIGITAL T[...] | 104.217.115.98 (![]() | ||
2016-11-22 08:31 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 08:30 | intensivo.nl | AXC | 87.250.130.135 (![]() | ||
2016-11-22 08:30 | hubis.ir | 88.99.160.208 (![]() | |||
2016-11-22 08:30 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 08:30 | hosimin.com | HICHINA ZHICHENG TECHNOLOGY LTD. | (n/a) | ||
2016-11-22 08:30 | tupsorva.net | KEY-SYSTEMS GMBH | (n/a) | ||
2016-11-22 08:30 | mice.co.th | T.H.NIC Co., Ltd. | 119.59.104.33 (![]() | ||
2016-11-22 08:30 | lijschool.com | GABIA, INC. | 183.111.174.19 (![]() | ||
2016-11-22 08:30 | manhtienphat.com | MAT BAO TRADING & SERVICE COMPAN[...] | 125.212.252.2 (![]() | ||
2016-11-22 08:30 | kzprojekt.pl | nazwa.pl sp. z o.o. | 193.239.206.248 (![]() | ||
2016-11-22 08:30 | k-koubunsha.jp | 202.164.227.193 (![]() | |||
2016-11-22 08:30 | lomtour.com | NAME.COM, INC. | 203.146.26.85 (![]() | ||
2016-11-22 08:29 | icnvcopa.com | ENOM, INC. | (n/a) | ||
2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
2016-11-22 08:29 | ayso722.org | FastDomain Inc. | (n/a) | ||
2016-11-22 08:29 | hfhhk.com | GODADDY.COM, LLC | 104.216.51.3 (![]() | ||
2016-11-22 08:29 | irnetshop.com | REALTIME REGISTER BV | (n/a) | ||
2016-11-22 08:29 | internationalservice.ro | ICI - ROTLD | 188.215.48.176 (![]() | ||
2016-11-22 08:29 | ipiasarnano.it | WIDE-REG | 217.73.227.20 (![]() | ||
2016-11-22 08:29 | emdrozd.net | KEY-SYSTEMS GMBH | 91.227.122.10 (![]() | ||
2016-11-22 08:29 | gerardfetter.com | GODADDY.COM, LLC | 74.218.154.76 (![]() | ||
2016-11-22 08:29 | nnptrading.com | DOMAIN.COM, LLC | 203.151.233.116 (![]() | ||
2016-11-22 08:28 | vyingouch.com | KEY-SYSTEMS GMBH | 204.11.56.48 (![]() | ||
2016-11-22 08:28 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
2016-11-22 08:28 | laszloiparcikk.hu | 195.228.86.32 (![]() | |||
2016-11-22 08:28 | mildreddeskinsjewelry.com | GODADDY.COM, LLC | 50.63.202.49 (![]() | ||
2016-11-22 08:28 | mygfiltre.com | NICS TELEKOMUNIKASYON TIC LTD. S[...] | (n/a) | ||
2016-11-22 08:28 | espansioneimmobiliare.com | WILD WEST DOMAINS, LLC | 192.124.249.107 (![]() |
# of rows displayed: 100
# of entries in database: 13'867