Tracker
Ransomware Tracker to distinguishes between the following threats:
- Ransomware botnet Command & Control servers (C&Cs)
- Ransomware Payment Sites
- Ransomware Distribution Sites
Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:
- TeslaCrypt
- CryptoWall (if you do want to know more about CryptoWall, check out CryptoWall Tracker)
- TorrentLocker
- PadCrypt
- Locky
- CTB-Locker
- FAKBEN
- PayCrypt
New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.
Search
You can search for a host or URL using the following search form:
Set a filter for the list below
Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.
General filters: Remove filter (Show all) | Online hosts
Filter by threat: | |
Filter by malware: | | | | | | | | | | |
| Dateadded (UTC) | Threat | Malware | Host (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not. Red = Online Green = Offline Grey = Unknown) | Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.) | IP address (ASN, Country) |
|---|---|---|---|---|---|
| 2016-11-22 12:42 | verdianthy.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | (n/a) | ||
| 2016-11-22 12:42 | luanasahian.ro | Romarg SRL | (n/a) | ||
| 2016-11-22 12:42 | mckains.net | GODADDY.COM, LLC | (n/a) | ||
| 2016-11-22 12:42 | huduanjichuang.com | BIZCN.COM, INC. | 23.80.22.204 ( United States) | ||
| 2016-11-22 12:42 | warisstyle.com | JIANGSU BANGNING SCIENCE & TECHN[...] | 47.56.70.142 ( United States) | ||
| 2016-11-22 12:41 | gumorca.com | NEUBOX INTERNET SA DE CV | 198.58.118.167 ( United States) +5 A record(s) 45.33.2.79 (AS40034, United States) 45.33.23.183 (AS40034, United States)45.56.79.23 (AS3900, United States)45.79.19.196 (AS63949, United States)96.126.123.244 (AS63949, United States) | ||
| 2016-11-22 12:41 | hjertearken.dk | (n/a) | |||
| 2016-11-22 12:41 | marvicedo.com | 1&1 INTERNET SE | (n/a) | ||
| 2016-11-22 12:41 | dmsoinfo.com | ENOM, INC. | 154.215.112.72 ( United States) | ||
| 2016-11-22 12:41 | kuponik.eu | Michau Enterprises Limited | 136.243.50.2 ( Germany) | ||
| 2016-11-22 12:41 | robertocostama.com | ENOM, INC. | 186.202.153.91 ( Brazil) | ||
| 2016-11-22 12:41 | newautolatino.com | WILD WEST DOMAINS, LLC | 204.11.56.48 ( Virgin Islands) | ||
| 2016-11-22 12:41 | hancebile.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 12:40 | interdean.hu | 95.131.66.24 ( United Kingdom) | |||
| 2016-11-22 12:40 | lifanpower.pl | nazwa.pl sp. z o.o. | 94.130.51.151 ( Germany) | ||
| 2016-11-22 12:40 | lp511.com | HICHINA ZHICHENG TECHNOLOGY LTD. | (n/a) | ||
| 2016-11-22 12:40 | ulmustway.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 12:39 | microsupport.net | ASCIO TECHNOLOGIES, INC. DANMARK[...] | (n/a) | ||
| 2016-11-22 12:39 | reoilmaya.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 12:39 | mybankofgold.com | INSTRA CORPORATION PTY, LTD. | 213.136.88.141 ( Germany) | ||
| 2016-11-22 12:39 | rsahosting.com | ENOM, INC. | 143.95.246.177 ( United States) | ||
| 2016-11-22 12:38 | hancebile.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 12:38 | convertus.com | GODADDY.COM, LLC | 199.167.131.103 ( Canada) | ||
| 2016-11-22 12:38 | gtodo.com.ar | 200.110.156.67 ( Argentina) | |||
| 2016-11-22 12:38 | thegioitructuyen.org | P.A. Viet Nam Company Limited | 103.7.41.15 ( Vietnam) | ||
| 2016-11-22 12:38 | mcmustard.com | REGISTER.COM, INC. | 192.124.249.7 ( United States) | ||
| 2016-11-22 12:38 | maxifitness.ru | REGRU-RU | 91.218.229.10 ( Russian Federation) | ||
| 2016-11-22 12:38 | facerecognition.com.ba | 195.222.33.161 ( Bosnia and Herzegovina) | |||
| 2016-11-22 12:37 | jazz.kvalitne.cz | REG-STABLE | 185.64.219.5 ( Czech Republic) | ||
| 2016-11-22 12:37 | dtinsani.com | ONLINENIC, INC. | 175.103.55.72 ( Indonesia) | ||
| 2016-11-22 12:37 | sadhekoala.com | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-11-22 12:36 | sbdma.com | ENOM, INC. | 187.45.240.4 ( Brazil) | ||
| 2016-11-22 12:36 | gxaiq.com | CHENGDU WEST DIMENSION DIGITAL T[...] | 219.234.6.204 ( China) | ||
| 2016-11-22 12:36 | natalija.ru | R01-RU | 217.112.42.86 ( United Kingdom) | ||
| 2016-11-22 12:36 | mooymedia.nl | Fast DRS | 188.227.200.134 ( Netherlands) | ||
| 2016-11-22 12:35 | kabele.ru | RU-CENTER-RU | 195.28.183.183 ( Ukraine) | ||
| 2016-11-22 12:35 | i12.ir | 185.94.97.250 ( Iran) | |||
| 2016-11-22 12:35 | melzer-casting.de | (n/a) | |||
| 2016-11-22 12:35 | illinoisnavhda.org | BRANDON GRAY INTERNET SERVICES I[...] | 198.185.159.144 ( United States) +3 A record(s) 198.185.159.145 (AS53831, United States) 198.49.23.144 (AS53831, United States)198.49.23.145 (AS53831, United States) | ||
| 2016-11-22 12:35 | bursacicekmagazasi.com | REG2C.COM, INC. | 188.124.24.242 ( Turkey) | ||
| 2016-11-22 12:35 | kstm.or.th | T.H.NIC Co., Ltd. | (n/a) | ||
| 2016-11-22 12:35 | poltec.com.au | Web Address Registration | (n/a) | ||
| 2016-11-22 12:34 | lomtalay.com | ONLINENIC, INC. | 119.59.99.30 ( Thailand) | ||
| 2016-11-22 12:34 | pattumalamatha.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-11-22 12:34 | touroflimassol.com | 1&1 INTERNET SE | 74.208.236.161 ( United States) | ||
| 2016-11-22 12:34 | megalingeriemall.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-11-22 12:34 | wbakerpsych.com | ENOM, INC. | 208.91.197.27 ( United States) | ||
| 2016-11-22 12:34 | sdwsgs.com | HICHINA ZHICHENG TECHNOLOGY LTD. | 120.76.113.75 ( China) | ||
| 2016-11-22 12:34 | adoptshawm.net | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 12:33 | lumitech.ro | ICI - ROTLD | 188.241.152.101 ( Romania) | ||
| 2016-11-22 12:33 | snehil.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-11-22 12:33 | woodmode-eg.com | DOMAIN.COM, LLC | (n/a) | ||
| 2016-11-22 12:33 | korbastudio.com | NETART SP Z O.O | 185.204.218.214 ( Poland) | ||
| 2016-11-22 12:33 | campossa.com | EURODNS S.A | 83.217.74.164 ( Belgium) | ||
| 2016-11-22 12:32 | gto-cro.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 104.27.168.253 ( United States) +1 A record(s) 104.27.169.253 (AS13335, United States) | ||
| 2016-11-22 12:32 | remixsarkilar.com | NAME.COM, INC. | (n/a) | ||
| 2016-11-22 12:32 | jkshea.com | NETEARTH ONE INC. D/B/A NETEARTH | (n/a) | ||
| 2016-11-22 12:32 | phaseiv.org | Network Solutions, LLC | 198.71.232.3 ( United States) | ||
| 2016-11-22 12:32 | maroeg.com | WILD WEST DOMAINS, LLC | (n/a) | ||
| 2016-11-22 12:31 | irandivinggroup.com | TUCOWS DOMAINS INC. | 78.129.132.132 ( United Kingdom) | ||
| 2016-11-22 12:30 | csplane.com | GODADDY.COM, LLC | 72.55.186.12 ( Canada) | ||
| 2016-11-22 12:30 | touroflimassol.com | 1&1 INTERNET SE | 74.208.236.161 ( United States) | ||
| 2016-11-22 12:30 | vedexpert.com | REGIONAL NETWORK INFORMATION CEN[...] | 78.46.52.118 ( Germany) | ||
| 2016-11-22 12:30 | whatsapphd.com | GODADDY.COM, LLC | 204.11.56.48 ( Virgin Islands) | ||
| 2016-11-22 12:30 | oualili.org | FastDomain Inc. | (n/a) | ||
| 2016-11-22 12:29 | rndled.com | HICHINA ZHICHENG TECHNOLOGY LTD. | (n/a) | ||
| 2016-11-22 12:29 | ulmustway.com | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 12:29 | valpit.ru | RU-CENTER-RU | 109.70.26.37 ( Russian Federation) +1 A record(s) 194.85.61.76 (AS203051, Russian Federation) | ||
| 2016-11-22 08:31 | langzhong8.com | CHENGDU WEST DIMENSION DIGITAL T[...] | (n/a) | ||
| 2016-11-22 08:31 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 08:30 | intensivo.nl | AXC | 87.250.130.135 ( Netherlands) | ||
| 2016-11-22 08:30 | hubis.ir | (n/a) | |||
| 2016-11-22 08:30 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 08:30 | hosimin.com | HICHINA ZHICHENG TECHNOLOGY LTD. | (n/a) | ||
| 2016-11-22 08:30 | tupsorva.net | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-11-22 08:30 | mice.co.th | T.H.NIC Co., Ltd. | 119.59.104.33 ( Thailand) | ||
| 2016-11-22 08:30 | lijschool.com | GABIA, INC. | 183.111.174.19 ( Korea) | ||
| 2016-11-22 08:30 | manhtienphat.com | MAT BAO TRADING & SERVICE COMPAN[...] | 207.148.89.200 ( Canada) | ||
| 2016-11-22 08:30 | kzprojekt.pl | nazwa.pl sp. z o.o. | 193.239.206.248 ( Poland) | ||
| 2016-11-22 08:30 | k-koubunsha.jp | 202.164.227.193 ( Japan) | |||
| 2016-11-22 08:30 | lomtour.com | NAME.COM, INC. | 203.146.26.85 ( Thailand) | ||
| 2016-11-22 08:29 | icnvcopa.com | ENOM, INC. | (n/a) | ||
| 2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 08:29 | ablerkeawe.net | PAKNIC (PRIVATE) LIMITED | (n/a) | ||
| 2016-11-22 08:29 | ayso722.org | FastDomain Inc. | (n/a) | ||
| 2016-11-22 08:29 | hfhhk.com | GODADDY.COM, LLC | 23.20.239.12 ( United States) | ||
| 2016-11-22 08:29 | irnetshop.com | REALTIME REGISTER BV | (n/a) | ||
| 2016-11-22 08:29 | internationalservice.ro | ICI - ROTLD | 188.215.48.176 ( Romania) | ||
| 2016-11-22 08:29 | ipiasarnano.it | WIDE-REG | 217.73.227.20 ( Italy) | ||
| 2016-11-22 08:29 | emdrozd.net | KEY-SYSTEMS GMBH | 91.227.122.10 ( Poland) | ||
| 2016-11-22 08:29 | gerardfetter.com | GODADDY.COM, LLC | 74.218.154.76 ( United States) | ||
| 2016-11-22 08:29 | nnptrading.com | DOMAIN.COM, LLC | 203.151.233.116 ( Thailand) | ||
| 2016-11-22 08:28 | vyingouch.com | KEY-SYSTEMS GMBH | 204.11.56.48 ( Virgin Islands) | ||
| 2016-11-22 08:28 | dangdika.com | IP MIRROR PTE LTD. DBA IP MIRROR | (n/a) | ||
| 2016-11-22 08:28 | laszloiparcikk.hu | 195.228.86.32 ( Hungary) | |||
| 2016-11-22 08:28 | mildreddeskinsjewelry.com | GODADDY.COM, LLC | 50.63.202.51 ( United States) | ||
| 2016-11-22 08:28 | mygfiltre.com | NICS TELEKOMUNIKASYON TIC LTD. S[...] | (n/a) | ||
| 2016-11-22 08:28 | espansioneimmobiliare.com | WILD WEST DOMAINS, LLC | 192.124.249.107 ( United States) | ||
| 2016-11-22 08:28 | tupsorva.net | KEY-SYSTEMS GMBH | (n/a) |
# of rows displayed: 100
# of entries in database: 13'865