ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed


DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2017-10-18Citadeljad.fisbonline.com198.54.117.2004online0Not listed-AS22612838:59:59
2017-09-29Citadelbora.studentworkbook.pw141.8.226.584online0Not listed-AS40034838:59:59
2017-08-16VMZeuSl3d.pp.ru213.183.41.221online0Not listed-AS56630838:59:59
2017-08-14Citadellisovfoxcom.418.com1.ru80.78.250.263online0Not listed-AS43146838:59:59
2017-08-09VMZeuSiclear.studentworkbook.pw141.8.226.584online0Not listed-AS40034838:59:59
2017-08-06VMZeuSlurdinha.psc.br191.252.134.382online0SBL361129-AS27715838:59:59
2017-08-02VMZeuSdzitech.net212.1.215.1174online0Not listed-AS47583838:59:59
2017-07-14Citadelivansaru.418.com1.ru80.78.250.264online0Not listed-AS43146838:59:59
2017-06-13Citadelalvoportas.com.br187.191.98.2024online0Not listed-AS262545838:59:59
2017-06-06Citadelwww.poloatmer.ru89.223.26.524online0Not listed-AS201848838:59:59
2017-01-25VMZeuSafobal.cl66.7.198.1654online0Not listed-AS33182838:59:59
2016-12-29VMZeuSdifusoragoiania.com.br67.23.238.742online0Not listed-AS33182838:59:59
2016-10-04Citadelwww.slapintins.publicvm.com67.214.175.694online0Not listed-AS12260838:59:59
2016-10-04Citadelavast-mail-security.download104.238.158.1064online1Not listed-AS20473838:59:59
2016-09-27Citadeldbimbem.axfree.com144.76.115.363online0Not listed-AS24940838:59:59
2016-09-25Citadelkaydayeuti.axfree.com144.76.115.363online0Not listed-AS24940838:59:59
2016-09-22VMZeuSdereksing.top104.238.158.1064online1Not listed-AS20473838:59:59
2016-09-18VMZeuScitricbenz.website216.218.135.1144online1Not listed-AS6939838:59:59
2016-09-05Citadelvodahelp.sytes.net194.109.64.1314online0Not listed-AS3265838:59:59
2016-09-02Citadelfoxlimited.top216.218.135.1144online1Not listed-AS6939838:59:59
2016-07-30Citadellzediamike.trade104.238.158.1064online2Not listed-AS20473838:59:59
2016-07-05Citadelmetalexvietnamreed.tk195.20.41.2054online0Not listed- 838:59:59
2016-06-28VMZeuSkarma-bodrum.com178.210.173.462online0SBL303040- 838:59:59
2016-06-22Citadelkntksales.tk195.20.44.2524online0Not listed- 838:59:59
2016-06-12ZeuSrexafajay.axfree.com144.76.115.363online0Not listed- 838:59:59
2016-05-07VMZeuSxbsezlmaha.loan104.238.158.1064online1Not listed-AS20473838:59:59
2016-04-30VMZeuSkudrnwosas.faith104.238.158.1064online1Not listed-AS20473838:59:59
2016-04-10VMZeuStekadrian.pro104.238.158.1064online1Not listed-AS20473838:59:59
2016-04-02VMZeuSstorroliko.club104.238.158.1064online1Not listed-AS20473838:59:59
2016-03-25VMZeuSteksoft.pro104.238.158.1064online1Not listed-AS20473838:59:59
2016-02-25ZeuScy-m0ld.com104.238.158.1064online1Not listed-AS20473838:59:59
2016-02-23ZeuSfelceconserve.com104.238.158.1064online1Not listed-AS20473838:59:59
2016-02-19ZeuSvegantravelshow.com209.191.185.672online0SBL286661- 838:59:59
2016-01-30ZeuSprtscrinsertcn.net198.54.117.2004online1Not listed-AS22612838:59:59
2016-01-30VMZeuSns511849.ip-192-99-19.net192.99.19.44online0Not listed- 838:59:59
2015-12-27VMZeuStelefonfiyatlari.org185.153.221.1464online0Not listed- 838:59:59
2015-12-23ZeuSfadzulani.com104.42.225.1224online1Not listed-AS8075838:59:59
2015-12-11Citadelwww.antibasic.ga195.20.53.1574online0Not listed- 838:59:59
2015-12-04Citadelmaminoleinc.tk195.20.41.2334online0Not listed- 838:59:59
2015-11-30VMZeuSluenhinpearl.com192.64.119.344online0Not listed- 838:59:59
2015-11-28VMZeuSobyno.xyz199.59.242.1504online0Not listed- 838:59:59
2015-11-28Citadelnasscomminc.tk195.20.44.1004online0Not listed- 838:59:59
2015-10-18ZeuSdomnicpeter.in.net216.218.135.1144online0Not listed- 838:59:59
2015-10-01VMZeuSchhathpuja.comFastFlux Botnet5online0Not listed- 838:59:59
2015-09-13ZeuScd31411.tmweb.ru92.53.96.713online0Not listed-AS9123838:59:59
2015-09-04VMZeuSupdateacces.org216.218.135.1144online0Not listed-AS6939838:59:59
2015-06-28ZeuSpharmaspan.com109.199.98.632online0SBL260553-AS32475838:59:59
2015-06-17KINSbright.su89.108.85.654online0Not listed-AS43146838:59:59
2015-04-29Citadelzetes.vdsinside.com4online0Not listed- 838:59:59
2015-04-05Citadelns513726.ip-192-99-148.net192.99.148.264online0Not listed-AS16276838:59:59
2015-03-29Citadelteeth.co.jp115.146.59.2072online0SBL251755-AS9597838:59:59
2015-02-19ZeuSu0003321.cp.regruhosting.ru37.140.192.1693online0Not listed-AS197695838:59:59
2015-02-02Citadelshadowraze.pw141.8.226.584online0Not listed-AS40034838:59:59
2015-02-02Citadelhui-ain-apparel.tk195.20.42.14online0Not listed-AS31624838:59:59
2015-02-01ZeuSislenpiding.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSnatlalirans.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSdileconme.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSpharirgatic.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSimamnhearte.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSnaaninggeschcho.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSrarabarnfi.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-02-01ZeuSgyodundena.hotmail.ruFastFlux Botnet5online0Not listed- 838:59:59
2015-01-31Citadelsperoni.pw141.8.226.584online0Not listed-AS40034838:59:59
2015-01-15ZeuSiltempo.com.au116.90.0.582online0Not listed-AS55803838:59:59
2014-12-21ZeuSwww.mauritaniecoeur.orgFastFlux Botnet5online0Not listed- 838:59:59
2014-12-02ZeuSwww.basecinco.com.ar190.183.59.1332online0SBL241516-AS20207838:59:59
2014-11-28ZeuSsanyai-love.rmu.ac.th202.29.22.384online0SBL241091-AS132879838:59:59
2014-11-19ZeuSwww.rimmugygur.is194.144.188.702online0SBL240338-AS12969838:59:59
2014-11-15ZeuSstats.lead.mysitehosted.com198.58.94.1183online0Not listed-AS36351838:59:59
2014-11-12ZeuSmycraft.com.br186.250.244.1004online0Not listed-AS53221838:59:59
2014-10-28ZeuSinterlogistics.com.vn210.245.8.1314online0Not listed-AS18403838:59:59
2014-10-16ZeuScryptmyexe.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-10-09ZeuScapacitacion.inami.gob.mx187.141.12.1612online0SBL236684-AS8151838:59:59
2014-10-01ZeuSdominoziele.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-09-22ZeuSwww.impm.upel.edu.veFastFlux Botnet5online0Not listed- 838:59:59
2014-09-03ZeuSwww.ipm.upel.edu.veFastFlux Botnet5online0Not listed- 838:59:59
2014-08-24ZeuSsecufast.bplaced.net94.130.236.1003online0Not listed-AS24940838:59:59
2014-08-09ZeuSmm266.bplaced.com94.130.236.1003online0Not listed-AS24940838:59:59
2014-08-07Citadelu8781a21.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-08-06Ice IXdlauten.bplaced.net94.130.236.1003online0Not listed-AS24940838:59:59
2014-07-04ZeuSmachine.cu.ma66.45.245.1504online0Not listed-AS19318838:59:59
2014-07-04ZeuSjazmany.cu.ma66.45.245.1504online0Not listed-AS19318838:59:59
2014-06-16ZeuSjapanparts.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-06-12ZeuSsecuretalk.cwsurf.de78.46.182.1023online0Not listed-AS24940838:59:59
2014-06-09ZeuSdl.dropbox.com162.125.65.63online0Not listed-AS19679838:59:59
2014-05-12Citadelkesikelyaf.com37.123.99.1881online0Not listed-AS57844838:59:59
2014-04-16Citadeldau43vt5wtrd.tk195.20.44.1094online0Not listed-AS31624838:59:59
2014-04-11ZeuSwww.orquestanacaona.cult.cu200.0.24.422online0SBL219217-AS27725838:59:59
2014-04-10ZeuSwww.nikey.cn120.31.134.1331online0Not listed-AS134764838:59:59
2014-04-02ZeuSssl.sinergycosmetics.com31.7.63.1464online0Not listed-AS51852838:59:59
2014-04-02ZeuScircleread-view.com.mocha2003.mochahost.com198.38.82.493online0Not listed-AS23352838:59:59
2014-03-20ZeuSreimbergit.com.brFastFlux Botnet5online0Not listed- 838:59:59
2014-03-08Citadelupdate.rifugiopontese.it37.143.11.1894online0Not listed-AS203226838:59:59
2014-02-16ZeuSblogerjijer.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-02-13Citadelserverjainpangwang.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-02-12Citadeldebservers.pw141.8.226.584online0Not listed-AS40034838:59:59
2013-11-20Citadelpanel.vargakragard.se83.69.233.1214online0Not listed-AS28762838:59:59
2013-10-04ZeuSwww.perilshed.info103.224.212.2224online0Not listed-AS133618838:59:59
2013-09-03ZeuSp-alpha.ooo.al208.91.197.914online0Not listed-AS40034838:59:59
2013-09-02Citadelserver.bovine-mena.com46.4.150.1114online0Not listed-AS24940838:59:59
2013-07-19Citadelwww.witkey.com101.200.81.1874online0Not listed-AS37963838:59:59
2013-07-08Ice IXice.ip64.net216.176.184.214online0Not listed-AS23033838:59:59
2013-06-15Ice IXprojects.globaltronics.net66.116.153.1424online0Not listed-AS32392838:59:59
2013-01-23ZeuSjangasm.org50.63.202.494online0Not listed-AS26496838:59:59
2012-10-12Citadelhruner.com50.63.202.611online0Not listed-AS26496838:59:59

# of ZeuS C&Cs displayed: 105
# of ZeuS C&Cs in ZeuS Tracker: 445 [Remove all filters]