ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed


DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2015-09-20Citadelwww.cpro.moscow1offline0Not listed- 93:36:06
2015-03-28ZeuSzabava-bel.ru78.153.151.1821online0Not listed-AS28738838:59:59
2014-07-16KINSvalntooglesakrundigk.pw1offline0Not listed- 05:19:28
2014-05-12Citadelkesikelyaf.com37.123.99.1881online0Not listed-AS57844838:59:59
2014-04-10ZeuSwww.nikey.cn120.31.134.1331online0Not listed-AS134764838:59:59
2013-12-04Citadelupdate.odeen.eu185.25.117.491online0Not listed-AS200000838:59:59
2012-10-12Citadelhruner.com1offline0Not listed- 838:59:59

# of ZeuS C&Cs displayed: 7
# of ZeuS C&Cs in ZeuS Tracker: 493 [Remove all filters]