ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed

DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2017-06-01Citadelnsdic.pp.ru185.6.242.2511online0Not listed-AS203591838:59:59
2015-09-20Citadelwww.cpro.moscow1offline0Not listed- 93:36:06
2014-07-16KINSvalntooglesakrundigk.pw1offline0Not listed- 05:19:28
2014-05-12Citadelkesikelyaf.com89.252.186.1421online0Not listed-AS42926838:59:59
2014-04-10ZeuSwww.nikey.cn120.31.134.1331online0Not listed-AS4134838:59:59
2012-10-12Citadelhruner.com50.63.202.631online0Not listed-AS26496838:59:59

# of ZeuS C&Cs displayed: 8
# of ZeuS C&Cs in ZeuS Tracker: 459 [Remove all filters]