Tracker
Ransomware Tracker to distinguishes between the following threats:
- Ransomware botnet Command & Control servers (C&Cs)
- Ransomware Payment Sites
- Ransomware Distribution Sites
Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:
- TeslaCrypt
- CryptoWall (if you do want to know more about CryptoWall, check out CryptoWall Tracker)
- TorrentLocker
- PadCrypt
- Locky
- CTB-Locker
- FAKBEN
- PayCrypt
New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.
Search
You can search for a host or URL using the following search form:
Set a filter for the list below
Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.
General filters: Remove filter (Show all) | Online hosts
Filter by threat: | |
Filter by malware: | | | | | | | | | | |
| Dateadded (UTC) | Threat | Malware | Host (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not. Red = Online Green = Offline Grey = Unknown) | Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.) | IP address (ASN, Country) |
|---|---|---|---|---|---|
| 2016-09-23 09:31 | kilimanjaroclimbingadventure.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | (n/a) | ||
| 2016-09-23 09:30 | www.nextgeninternational.co.uk | GoDaddy.com, LLP. | 79.170.40.170 ( United Kingdom) | ||
| 2016-09-23 09:29 | rajashekharkubasad.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 209.99.40.223 ( United States) | ||
| 2016-09-23 09:28 | lifecarepanacea.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 151.106.9.9 ( United States) | ||
| 2016-09-23 09:27 | williamstarnetsys.org | SiliconHouse.Net Pvt. Ltd. | (n/a) | ||
| 2016-09-23 09:27 | justselfie.in | Endurance Domains Technology Pvt[...] | (n/a) | ||
| 2016-09-23 09:26 | teamoneglobal.biz | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | (n/a) | ||
| 2016-09-23 09:26 | www.alwinart.ro | EuroDomenii | (n/a) | ||
| 2016-09-23 09:25 | kinsmanipl.com | SILICONHOUSE.NET PVT LTD. | (n/a) | ||
| 2016-09-23 09:25 | strikeonehr.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 91.195.240.126 ( Germany) | ||
| 2016-09-23 02:06 | 52uo5k3t73ypjije.8cjlyt.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 19:42 | 52uo5k3t73ypjije.yty0gm.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 13:11 | unocl45trpuoefft.r2vai7.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 12:58 | 52uo5k3t73ypjije.m6j75a.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 12:50 | shuklaenterprises.in | GoDaddy.com, LLC (R101-AFIN) | 148.66.136.59 ( Singapore) | ||
| 2016-09-22 12:50 | s603253812.websitehome.co.uk | 1 & 1 Internet SE | (n/a) | ||
| 2016-09-22 12:50 | valamaanatamizhagam.com | GODADDY.COM, LLC | 23.229.180.69 ( United States) | ||
| 2016-09-22 12:49 | www.paintingoregon.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-09-22 12:47 | darita-bg.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 91.215.216.49 ( Bulgaria) | ||
| 2016-09-22 12:47 | pollenconsultants.in | GoDaddy.com, LLC (R101-AFIN) | (n/a) | ||
| 2016-09-22 12:47 | stannscollegehyd.com | DOMAIN.COM, LLC | 216.10.246.75 ( India) | ||
| 2016-09-22 12:46 | unitedfashionwearltd.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 192.185.129.32 ( United States) | ||
| 2016-09-22 12:45 | kothagudemtv.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-09-22 12:45 | professionalyearcourses.com.au | TPP Wholesale Pty Ltd | 202.124.241.178 ( Australia) | ||
| 2016-09-22 12:44 | htk.com.vn | 112.78.2.101 ( Vietnam) | |||
| 2016-09-22 12:44 | www.softbdltd.com | ENOM, INC. | 162.241.217.186 ( United States) | ||
| 2016-09-22 12:43 | unocl45trpuoefft.pbprju.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 12:43 | stannscollege.co.in | GoDaddy.com, LLC (R101-AFIN) | (n/a) | ||
| 2016-09-22 12:42 | glanzcomfortwear.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-09-22 12:41 | dashingleather.com | CRAZY DOMAINS FZ-LLC | 74.124.210.105 ( United States) | ||
| 2016-09-22 12:39 | www.amayalingerie.com | ENOM, INC. | 91.195.240.87 ( Germany) | ||
| 2016-09-22 12:39 | josephcarterministries.com | LAUNCHPAD.COM, INC. | 208.91.197.13 ( Virgin Islands) | ||
| 2016-09-22 12:39 | dev.suetables.com | GODADDY.COM, LLC | 184.168.131.241 ( United States) | ||
| 2016-09-22 12:38 | fosung.com | XIN NET TECHNOLOGY CORPORATION | 119.188.4.81 ( China) | ||
| 2016-09-22 12:37 | skiingvoyage.com | GODADDY.COM, LLC | 192.185.35.79 ( United States) | ||
| 2016-09-22 12:37 | veterans-cms.purplebug.net | GODADDY.COM, LLC | 162.214.22.52 ( United States) | ||
| 2016-09-22 12:37 | soft-bd.com | ENOM, INC. | 108.178.13.98 ( United States) | ||
| 2016-09-22 12:37 | saudplacementservices.com | GODADDY.COM, LLC | 132.148.154.98 ( United States) | ||
| 2016-09-22 12:37 | thelibralegal.com | GODADDY.COM, LLC | (n/a) | ||
| 2016-09-22 12:36 | www.bullypedia.net | WILD WEST DOMAINS, LLC | 216.55.182.161 ( United States) | ||
| 2016-09-22 12:36 | xaviaintl.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 192.185.188.83 ( United States) | ||
| 2016-09-22 12:32 | shinalumen.com | WEB COMMERCE COMMUNICATIONS LIMI[...] | (n/a) | ||
| 2016-09-22 12:31 | crescenttourstravels.com | GODADDY.COM, LLC | 132.148.154.98 ( United States) | ||
| 2016-09-22 12:31 | flexfitent.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 94.130.134.49 ( Germany) | ||
| 2016-09-22 12:30 | homeboutique.com | TIERRANET INC. D/B/A DOMAINDISCO[...] | 205.196.209.177 ( United States) | ||
| 2016-09-22 12:29 | lakesatcenterra.com | NETWORK SOLUTIONS, LLC. | 205.186.187.227 ( United States) | ||
| 2016-09-22 12:29 | uniqxprinting.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | (n/a) | ||
| 2016-09-22 12:29 | financialadvicefree.com | GODADDY.COM, LLC | 108.179.232.57 ( United States) | ||
| 2016-09-22 12:01 | swadsexto.com | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 12:01 | audit1040.com | FASTDOMAIN, INC. | 162.241.79.10 ( United States) | ||
| 2016-09-22 12:01 | sanitaskliniek.nl | The Registrar Company B.V. | 185.104.29.4 ( Netherlands) | ||
| 2016-09-22 12:00 | yessyber.com | ENOM, INC. | 37.60.247.186 ( United States) | ||
| 2016-09-22 11:59 | shiyunwuliu.com | XIN NET TECHNOLOGY CORPORATION | 156.229.93.89 ( South Africa) | ||
| 2016-09-22 11:58 | squidhob.net | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 11:57 | stentormusic.com | TUCOWS DOMAINS INC. | 83.223.113.43 ( United Kingdom) | ||
| 2016-09-22 11:57 | wccfzone.net | ENOM, INC. | (n/a) | ||
| 2016-09-22 11:56 | wallytech.net | TUCOWS DOMAINS INC. | 67.222.145.66 ( United States) | ||
| 2016-09-22 11:56 | 108.174.196.88 | n/a | |||
| 2016-09-22 11:56 | sabiaito.net | WEB COMMERCE COMMUNICATIONS LIMI[...] | (n/a) | ||
| 2016-09-22 11:55 | hotelvegas.net | GODADDY.COM, LLC | 190.107.177.238 ( Chile) | ||
| 2016-09-22 11:55 | stingerpest.com | GODADDY.COM, LLC | 184.168.131.241 ( United States) | ||
| 2016-09-22 11:54 | usedkerri.com | WEB COMMERCE COMMUNICATIONS LIMI[...] | (n/a) | ||
| 2016-09-22 11:54 | aimshospital.net | GODADDY.COM, LLC | (n/a) | ||
| 2016-09-22 11:53 | indonesiawebpromotion.com | WEB COMMERCE COMMUNICATIONS LIMI[...] | 108.170.14.10 ( United States) | ||
| 2016-09-22 11:53 | forumeritrea.org | GoDaddy.com, LLC | (n/a) | ||
| 2016-09-22 11:53 | lightpack.tv | GODADDY.COM, LLC | 23.227.38.32 ( Canada) | ||
| 2016-09-22 11:53 | mobilenewscwp.co.uk | Namesco Limited | 52.215.205.124 ( Ireland) | ||
| 2016-09-22 11:52 | mavisehirrotaract.org | Nics Telekomunikasyon Ticaret Lt[...] | (n/a) | ||
| 2016-09-22 11:51 | ircfm.net | FBS INC. | (n/a) | ||
| 2016-09-22 11:51 | mutterundkind.com | TUCOWS DOMAINS INC. | 91.195.240.126 ( Germany) | ||
| 2016-09-22 11:51 | fsathai.org | OnlineNIC Inc. | 103.22.181.103 ( Thailand) | ||
| 2016-09-22 11:50 | imperiumcf.com | 123-REG LIMITED | 94.136.40.103 ( United Kingdom) | ||
| 2016-09-22 11:49 | ingesof.com | MARCARIA.COM, INTERNATIONAL, INC[...] | 201.148.104.20 ( Chile) | ||
| 2016-09-22 11:48 | serbmusic.org | PDR Ltd. d/b/a PublicDomainRegis[...] | (n/a) | ||
| 2016-09-22 11:48 | tourtoon.com | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 11:47 | squidhob.net | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 11:47 | kk-plaisir.com | NETOWL, INC. | (n/a) | ||
| 2016-09-22 11:46 | iuvade.com | PDR LTD. D/B/A PUBLICDOMAINREGIS[...] | 192.95.18.119 ( United States) | ||
| 2016-09-22 11:46 | 52uo5k3t73ypjije.j8873f.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 11:46 | marbellauniversity.com | ENOM, INC. | 185.14.57.2 ( Spain) | ||
| 2016-09-22 11:45 | hr-management-dimensions.co.uk | Webhosting UK COM Ltd t/a Webhos[...] | 5.77.50.192 ( United Kingdom) | ||
| 2016-09-22 11:45 | reloaded-xb.com | ENOM, INC. | 142.11.247.237 ( United States) | ||
| 2016-09-22 11:44 | 4kqd3hmqgptupi3p.p79b8l.bid | Eranet International Limited | (n/a) | ||
| 2016-09-22 11:44 | on-point.be | IOP bvba | 83.217.71.2 ( Belgium) | ||
| 2016-09-22 11:43 | stradalli.com | TUCOWS DOMAINS INC. | 192.254.235.232 ( United States) | ||
| 2016-09-22 11:43 | debie.pl | Consulting Service Sp. z o.o. | 91.223.57.50 ( Poland) | ||
| 2016-09-22 11:42 | unykmanagement.com | ENOM, INC. | 143.95.74.249 ( United States) | ||
| 2016-09-22 11:42 | tourtoon.com | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 11:41 | apolycarpou.com | ENOM, INC. | 192.254.190.167 ( United States) | ||
| 2016-09-22 11:41 | usedkerri.com | WEB COMMERCE COMMUNICATIONS LIMI[...] | (n/a) | ||
| 2016-09-22 11:41 | swadsexto.com | KEY-SYSTEMS GMBH | (n/a) | ||
| 2016-09-22 11:41 | saigonvisa24h.com | ONLINENIC, INC. | 210.245.89.47 ( Vietnam) | ||
| 2016-09-22 11:40 | acefur.com | ONLINENIC, INC. | 198.185.159.144 ( United States) | ||
| 2016-09-22 11:40 | liatrisguzellik.com | NICS TELEKOMUNIKASYON TICARET LT[...] | 93.89.231.24 ( Cyprus) | ||
| 2016-09-22 11:40 | talleresbonillo.com | DOMAIN.COM, LLC | 86.109.162.26 ( Spain) | ||
| 2016-09-22 11:40 | agrobase.com.br | 144.202.74.168 ( United States) | |||
| 2016-09-22 11:39 | c-hatas.com | DOMAIN THE NET TECHNOLOGIES LTD. | 185.151.196.51 ( Israel) | ||
| 2016-09-22 11:39 | spb-gruz.ru | REGRU-RU | (n/a) | ||
| 2016-09-22 11:39 | alloftime.com | FASTDOMAIN, INC. | 108.167.189.62 ( United States) | ||
| 2016-09-22 11:39 | affordabledentaltours.com | GODADDY.COM, LLC | 208.91.197.46 ( Virgin Islands) |
# of rows displayed: 100
# of entries in database: 13'865