ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed


DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2014-04-14Citadelstandardbn.uni.meFastFlux Botnet5online2Not listed- 160:10:44
2014-03-20ZeuSreimbergit.com.brFastFlux Botnet5online0Not listed- 754:16:41
2014-02-09Citadeltnserver.tkFastFlux Botnet5online0Not listed- 838:59:59
2013-02-09ZeuSkathsk.comFastFlux Botnet5online0Not listed- 838:59:59
2013-01-12ZeuSemylosy.comFastFlux Botnet5online0Not listed- 838:59:59

# of ZeuS C&Cs displayed: 5
# of ZeuS C&Cs in ZeuS Tracker: 925 [Remove all filters]