ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed

DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2015-06-18Citadelmotoresin.com94.242.205.2262online1Not listed-AS5577308:40:28
2015-06-17KINSbright.suFastFlux Botnet5online1Not listed- 322:22:47
2015-06-06KINSprinzkel.eu188.68.252.1472online1Not listed-AS197226597:16:34
2015-04-11Citadel93.186.200.7593.186.200.754unknown1Not listed-AS24961
2015-02-20Citadelqchase.net95.85.57.582online1Not listed-AS200130838:59:59
2015-02-13ZeuSmechanicsources.com122.155.3.1502online1Not listed-AS9931838:59:59

# of ZeuS C&Cs displayed: 18
# of ZeuS C&Cs in ZeuS Tracker: 725 [Remove all filters]