ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed


DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2014-04-23ZeuSwww.esetron.com185.19.95.2462online1SBL220432-AS19936610:22:57
2014-04-23KINSconstruction89.ruFastFlux Botnet5online2Not listed- 14:09:37
2014-04-23KINSbugment.net77.40.126.924online2SBL220134-AS559115:16:38
2014-04-23Citadel54.254.175.4754.254.175.474unknown2SBL220411-AS38895
-
2014-04-23Citadel144.76.240.101144.76.240.1014unknown2SBL220380-AS24940
-
2014-04-23ZeuSgoogleupd.comFastFlux Botnet5online1Not listed- 20:31:37
2014-04-23ZeuSwww.bgluonline.com64.29.151.2212online2SBL220370-AS3044720:38:10
2014-04-23ZeuScareerplacementindia.com198.1.89.132online4SBL220364-AS4660620:51:57
2014-04-23Citadelkaneaccess.ruFastFlux Botnet5online2Not listed- 21:15:47
2014-04-22ZeuSreportonh.comFastFlux Botnet5online2Not listed- 44:31:36
2014-04-22ZeuSsysteinfo.comFastFlux Botnet5online1Not listed- 44:35:07
2014-04-22Citadelkraonkelaere.com85.92.140.672online2SBL220233-AS2552544:40:06
2014-04-22ZeuSactivatiin.co206.188.192.2462online2SBL220230-AS624544:52:14
2014-04-22Citadel50.76.104.4250.76.104.424unknown2SBL220211-AS33490
-
2014-04-19ZeuSwoodlandfarmersmarket.org2offline2Not listed- 115:03:46
2014-04-18Citadelrudyhadisuwarnocosmetics.com116.90.163.2372online2SBL219922-AS18059140:03:12
2014-04-18ZeuSnow-work.ru4offline2Not listed- 83:41:14
2014-04-16Citadel222.29.197.232222.29.197.2324unknown2SBL219755-AS4538
-
2014-04-14Ice IXreznormakro.suFastFlux Botnet5online2Not listed- 232:14:12
2014-04-14Citadelstandardbn.uni.meFastFlux Botnet5online2Not listed- 235:50:03
2014-04-12Citadel184.22.228.51184.22.228.514unknown1SBL219349-AS21788
-
2014-04-12Citadel42.121.195.5442.121.195.544unknown2SBL219337-AS37963
-
2014-04-11Ice IXwww.mamba-art.ru217.117.71.2522online1SBL219270-AS15742302:09:33
2014-04-10ZeuSwww.nikey.cn113.108.204.301online2SBL219067-AS4134332:34:44
2014-04-09Citadelpubby.ruFastFlux Botnet5online2Not listed- 357:03:18
2014-04-04ZeuSmusculationexercice.com109.234.161.252online2SBL218507-AS50474475:47:54
2014-04-02Ice IXwww.marcasitehost.com.br186.233.185.282online1SBL218340-AS263079519:23:11
2014-04-02ZeuSssl.sinergycosmetics.com31.7.63.1464online2Not listed-AS51852524:52:43
2014-03-28ZeuSwww.technlip.com198.176.28.492online2SBL217785-AS46785637:26:21
2014-03-27Citadel190.128.29.1190.128.29.14unknown2SBL217683-AS13489
-
2014-03-20Citadel65.200.132.2065.200.132.204unknown2SBL216840-AS26772
-
2014-03-20Citadel182.71.19.180182.71.19.1804unknown2SBL216828-AS9498
-
2014-03-20Citadel121.199.57.56121.199.57.564unknown2SBL218450-AS37963
-
2014-03-13Citadelsaudeodontos.com.br200.98.246.2142online2SBL215949-AS7162838:59:59
2013-10-29Citadelmadlion.sc91.229.20.1344online2Not listed-AS197922838:59:59

# of ZeuS C&Cs displayed: 35
# of ZeuS C&Cs in ZeuS Tracker: 957 [Remove all filters]