Tracker
Ransomware Tracker to distinguishes between the following threats:
- Ransomware botnet Command & Control servers (C&Cs)
- Ransomware Payment Sites
- Ransomware Distribution Sites
Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:
- TeslaCrypt
- CryptoWall (if you do want to know more about CryptoWall, check out CryptoWall Tracker)
- TorrentLocker
- PadCrypt
- Locky
- CTB-Locker
- FAKBEN
- PayCrypt
New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.
Search
You can search for a host or URL using the following search form:
Set a filter for the list below
Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.
General filters: Remove filter (Show all) | Online hosts
Filter by threat: | |
Filter by malware: | | | | | | | | | | |
| Dateadded (UTC) | Threat | Malware | Host (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not. Red = Online Green = Offline Grey = Unknown) | Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.) | IP address (ASN, Country) |
|---|---|---|---|---|---|
| 2016-09-02 14:21 | www.mussystems.net | TUCOWS DOMAINS INC. | 195.238.0.64 ( Belgium) | ||
| 2016-09-02 14:21 | www.runningmen-mk.de | (n/a) | |||
| 2016-09-02 14:21 | www.alpstaxi.co.jp | (n/a) | |||
| 2016-09-02 14:20 | albertowe.cba.pl | Abc Hosting Ltd. | 95.211.144.68 ( Netherlands) | ||
| 2016-09-02 14:20 | www.termoalbiate.com | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 14:20 | www.alessandrocangiano.com | TUCOWS DOMAINS INC. | 195.78.215.76 ( Italy) | ||
| 2016-09-02 14:20 | www.malicioso.net | NOMINALIA INTERNET S.L. | 62.42.230.17 ( Spain) | ||
| 2016-09-02 14:18 | www.motortecnica.org | Ascio Technologies, Inc. Danmark[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 14:18 | www.informaonline.org | Ascio Technologies, Inc. Danmark[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 14:17 | lokum1985.republika.pl | Domeny.pl sp. z o.o. | 213.180.141.189 ( Poland) | ||
| 2016-09-02 14:16 | andante-co.jp | (n/a) | |||
| 2016-09-02 14:16 | www.anacuamic.com | ENOM, INC. | 95.211.113.12 ( Netherlands) | ||
| 2016-09-02 14:16 | clubofmalw.ws | Eranet International Limited | 72.52.178.23 ( United States) | ||
| 2016-09-02 14:16 | abcbureautique.abc.perso.neuf.fr | Société Française du Radioté[...] | 86.65.123.70 ( France) | ||
| 2016-09-02 14:15 | danzig.vtrbandaancha.net | REGISTER.COM, INC. | 200.83.3.52 ( Chile) | ||
| 2016-09-02 14:15 | www.caminettilcd.it | MCLINK-REG | (n/a) | ||
| 2016-09-02 14:15 | bajkowestokrotki.cba.pl | Abc Hosting Ltd. | 95.211.144.65 ( Netherlands) | ||
| 2016-09-02 14:15 | 158.195.68.10 | n/a | |||
| 2016-09-02 14:14 | dcqoutlet.es | (n/a) | |||
| 2016-09-02 14:14 | www.saumi.jazztel.es | 62.14.3.195 ( Spain) | |||
| 2016-09-02 14:13 | www.threshold-online.co.uk | Plusnet Plc t/a Madasafish Broad[...] | 212.159.8.151 ( United Kingdom) +1 A record(s) 212.159.9.151 (AS6871, United Kingdom) | ||
| 2016-09-02 14:13 | srxrun.nobody.jp | 112.140.42.29 ( Japan) | |||
| 2016-09-02 14:12 | news.oboyle.ro | ICI - ROTLD | (n/a) | ||
| 2016-09-02 14:12 | maxshoppppsr.biz | ERANET INTERNATIONAL LIMITED | (n/a) | ||
| 2016-09-02 14:12 | maxshoppppsr.biz | ERANET INTERNATIONAL LIMITED | (n/a) | ||
| 2016-09-02 14:11 | www.cortesidesign.com | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 14:11 | bookinghotworld.ws | PDR Ltd. d/b/a PublicDomainRegis[...] | (n/a) | ||
| 2016-09-02 14:11 | postaldigitalrs.com.br | 187.45.193.139 ( Brazil) | |||
| 2016-09-02 14:09 | www.dallaglio-nordin.com | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 14:09 | e-gmp.home.ro | ICI - ROTLD | 81.196.20.133 ( Romania) | ||
| 2016-09-02 14:07 | eywlmqugxx.info | Dynadot, LLC | 69.195.129.70 ( United States) | ||
| 2016-09-02 11:20 | unocl45trpuoefft.gg4dgp.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 11:08 | 4kqd3hmqgptupi3p.boxtimed.gdn | AlpNames Limited | (n/a) | ||
| 2016-09-02 10:43 | 52uo5k3t73ypjije.9sfrr0.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 10:31 | 4kqd3hmqgptupi3p.effortany.win | Alpnames Limited | (n/a) | ||
| 2016-09-02 10:25 | 52uo5k3t73ypjije.c3fz3z.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 10:22 | 52uo5k3t73ypjije.k8ytej.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 07:53 | www.montegelato.it | TISCALIDOMAIN-REG | 213.205.38.40 ( Italy) | ||
| 2016-09-02 07:51 | rosivani.go.ro | ICI - ROTLD | 81.196.20.134 ( Romania) | ||
| 2016-09-02 07:48 | sitio655.vtrbandaancha.net | REGISTER.COM, INC. | 200.83.3.52 ( Chile) | ||
| 2016-09-02 07:47 | www.john.edmunds.talktalk.net | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 62.24.202.31 ( United Kingdom) | ||
| 2016-09-02 07:44 | 52uo5k3t73ypjije.ldsl8m.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 07:34 | unocl45trpuoefft.vmomcc.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 07:27 | unocl45trpuoefft.igpfcu.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 07:13 | 52uo5k3t73ypjije.4jub4e.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 06:55 | 52uo5k3t73ypjije.x9kjcn.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 06:43 | 52uo5k3t73ypjije.k0dcd2.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 06:25 | 4kqd3hmqgptupi3p.g7kcux.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 05:26 | 52uo5k3t73ypjije.kt70uk.bid | Eranet International Limited | (n/a) | ||
| 2016-09-02 05:09 | www.one-clap.jp | 163.43.80.67 ( Japan) | |||
| 2016-09-02 05:08 | josemedina.com | TUCOWS DOMAINS INC. | 67.225.176.60 ( United States) | ||
| 2016-09-02 05:08 | www.bytove.jadro.szm.com | GRANSY S.R.O D/B/A SUBREG.CZ | 85.248.42.103 ( Slovakia) | ||
| 2016-09-02 05:07 | aivee.koiwazurai.com | GMO INTERNET, INC. DBA ONAMAE.CO[...] | 112.140.42.29 ( Japan) | ||
| 2016-09-02 05:07 | sp-moto.ru | REGTIME-RU | 5.189.184.41 ( Germany) | ||
| 2016-09-02 05:07 | abcbureautique.abc.perso.neuf.fr | Société Française du Radioté[...] | 86.65.123.70 ( France) | ||
| 2016-09-02 05:07 | capannoneinliguria.com | OWN IDENTITY, INC | 84.33.0.247 ( Italy) | ||
| 2016-09-02 05:07 | www.plumbntile.talktalk.net | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 62.24.202.31 ( United Kingdom) | ||
| 2016-09-02 05:07 | portadeenrolar.ind.br | 158.106.185.63 ( United States) | |||
| 2016-09-02 05:06 | www.gsprzemkow.neostrada.pl | AZ.pl Sp. z o.o. | 217.97.216.17 ( Poland) | ||
| 2016-09-02 05:06 | 194.28.172.166 | n/a | |||
| 2016-09-02 05:06 | www.ccnprodusenaturiste.home.ro | ICI - ROTLD | 81.196.20.133 ( Romania) | ||
| 2016-09-02 05:06 | www.john.edmunds.talktalk.net | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 62.24.202.31 ( United Kingdom) | ||
| 2016-09-02 05:06 | www.vanetti.it | TISCALIDOMAIN-REG | 213.205.40.169 ( Italy) | ||
| 2016-09-02 05:06 | yggithuq.utawebhost.at | 195.248.63.109 ( Austria) | |||
| 2016-09-02 05:06 | sojasaude.com.br | 187.45.195.136 ( Brazil) | |||
| 2016-09-02 05:06 | www.spiritueelcentrumaum.net | TUCOWS DOMAINS INC. | 195.238.0.64 ( Belgium) | ||
| 2016-09-02 05:05 | foerschl.gmxhome.de | 82.165.62.70 ( Germany) | |||
| 2016-09-02 05:05 | t-schoener.de | (n/a) | |||
| 2016-09-02 05:05 | inge28.mytactis.com | OVH | (n/a) | ||
| 2016-09-02 05:05 | www.automac.it | MCLINK-REG | 195.78.215.76 ( Italy) | ||
| 2016-09-02 05:04 | www.erretisnc.it | TISCALIDOMAIN-REG | 213.205.40.169 ( Italy) | ||
| 2016-09-02 05:04 | toukontoutaukaiazalea.web.fc2.com | INSTRA CORPORATION PTY, LTD. | 104.244.99.16 ( United States) | ||
| 2016-09-02 05:04 | www.alpstaxi.co.jp | (n/a) | |||
| 2016-09-02 05:04 | t-schoener.de | (n/a) | |||
| 2016-09-02 05:04 | 6rota.costav.edusite.ru | RU-CENTER-RU | 85.193.69.29 ( Russian Federation) | ||
| 2016-09-02 05:04 | www.xolod-teplo.ru | REGTIME-RU | 95.181.231.14 ( Russian Federation) | ||
| 2016-09-02 05:03 | quinteam.com | DINAHOSTING SL | 62.82.105.206 ( Spain) | ||
| 2016-09-02 05:03 | www.empolio.com | ENOM, INC. | 213.204.1.56 ( Italy) | ||
| 2016-09-02 05:03 | mixup0813.web.fc2.com | INSTRA CORPORATION PTY, LTD. | 104.244.99.47 ( United States) | ||
| 2016-09-02 05:03 | andante-co.jp | (n/a) | |||
| 2016-09-02 05:03 | bajkowestokrotki.cba.pl | Abc Hosting Ltd. | 95.211.144.65 ( Netherlands) | ||
| 2016-09-02 05:03 | ssvylrn.pw | Registrar of Domain Names REG.RU[...] | n/a | ||
| 2016-09-02 05:02 | www.saumi.jazztel.es | 62.14.3.195 ( Spain) | |||
| 2016-09-02 05:02 | michik.web.fc2.com | INSTRA CORPORATION PTY, LTD. | 104.244.99.47 ( United States) | ||
| 2016-09-02 05:02 | www.beniculturali.org | Ascio Technologies, Inc. Danmark[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 05:01 | foerschl.gmxhome.de | 82.165.62.70 ( Germany) | |||
| 2016-09-02 05:01 | bushman-rest.com | CRONON AG | 81.169.145.82 ( Germany) | ||
| 2016-09-02 05:01 | www.parrucchieriagiacomo.com | ASCIO TECHNOLOGIES, INC. DANMARK[...] | 213.205.40.169 ( Italy) | ||
| 2016-09-02 05:01 | www.trauchgauer-weihnachtsmarkt.de | 109.237.140.20 ( Germany) | |||
| 2016-09-02 05:01 | body-fitness.net | NETWORK SOLUTIONS, LLC. | 81.88.57.68 ( Italy) | ||
| 2016-09-02 05:00 | www.dietmar-bernhard.de | (n/a) | |||
| 2016-09-02 05:00 | www.aktion-zukunft-gestalten.info | Ascio Technologies, Inc. Danmark[...] | 185.137.168.91 ( Germany) | ||
| 2016-09-02 05:00 | www.coropeppinumereu.it | TISCALIDOMAIN-REG | (n/a) | ||
| 2016-09-02 05:00 | sebangou8.xxxxxxxx.jp | 112.140.42.29 ( Japan) | |||
| 2016-09-02 05:00 | namadol.x.fc2.com | INSTRA CORPORATION PTY, LTD. | 104.244.99.171 ( United States) | ||
| 2016-09-02 05:00 | danzig.vtrbandaancha.net | REGISTER.COM, INC. | 200.83.3.52 ( Chile) | ||
| 2016-09-02 05:00 | 212.109.192.235 | 212.109.192.235 ( Russian Federation) | |||
| 2016-09-02 05:00 | 149.154.152.108 | 149.154.152.108 ( Austria) | |||
| 2016-09-02 04:59 | vimp.hi2.ro | ICI - ROTLD | (n/a) | ||
| 2016-09-02 04:59 | www.meallservice.it | TISCALIDOMAIN-REG | 62.149.128.45 ( Italy) |
# of rows displayed: 100
# of entries in database: 13'865