Threat feed
Command & Control (C2) IPs & domains — recent threat feed
Command-and-control servers coordinating infected machines. Aggregated from 100+ threat intelligence sources, refreshed daily.
- Malicious IPs
- 37 434
- Malicious domains
- 18 311
- Last updated
- 2026-10-16
Downloads are snapshots. For continuous Command & Control (C2) indicators, pull the STIX/TAXII threat feed into OpenCTI, MISP or your own pipeline.
Recently listed IPs
154.220.94.4646.224.162.14880.98.145.41190.53.144.120109.205.61.30119.29.21.84146.190.202.235106.53.168.218111.229.202.11594.142.138.3485.122.114.230104.251.181.148162.35.187.19015.161.59.5495.179.137.233168.245.203.16978.142.218.10108.61.203.22103.44.88.14147.124.212.23431.31.196.15743.207.225.199149.30.248.55209.38.19.20643.240.239.22816.16.126.52152.32.171.23057.129.100.6579.137.248.105172.105.180.513.126.37.18104.168.0.14745.192.204.42104.200.72.11166.42.94.24435.201.196.246124.221.126.16851.79.220.12585.217.144.111139.180.209.1738.60.242.20094.154.32.157204.10.160.17165.49.238.93178.62.199.215103.207.36.97185.115.164.59104.21.0.108135.181.11.36182.187.139.20043.164.0.74198.46.226.210172.93.143.151194.247.196.674.236.165.3094.142.141.235141.94.207.199104.239.66.9581.90.31.12172.81.183.183
Recently listed domains
brlogic.biz7mcnx.in.netmarinaradom.cfdremotev2.fucktermedfir.stkrnewfine.work.gdlalaqovy.workers.deva2mth2stcu69pc8h.orghhw.uk.comsecurelogin.lpzoo.orgsniper.gaicave.comfuryzeqy.workers.devttt.physiocardiff.comicreate.jp.nettrfsgysu28opask05.duckdns.orgsyecucqwkqiuueuy.xyzimagss.comglimemragent.comappistartes.comgchuy60045.workers.devinvitoenergypartners.comcs.xcb.onehahaios.cominsightpixel.icuzan9uav.snort-uharsky.surfmalware.phim3xmoi.comtaziho.workers.devwiodc17701.workers.devwww.pokerdom-kasinos-site.rusuperveneza.comlyvuze.workers.devwww.shoprecommai.spacemalware.biomolecular-archaeology.combrackenfolio.tophyvin.runcw91bzc2fb.workers.devgate.sidesunberkhotel.comdrum.jumpskyhigh.comsniper.pikseltesisatci.comgmla8hmqnc.workers.devmy.thispc.netmarketisportsstumi.win583848.clmonth.nyashteam.topapeduze.comave.hbway.com.auduke.poconodessertco.comninarober.accesscam.orgconxmsw.sutimelevel12.comiysqeicgswwmsqys.xyzgekw-55463.portmap.hostdisappointed5249.workers.devv2.www.dengedenetleme.orgtask.valley-north.lolshroom010.duckdns.orgtinneatonenessnabobical.commihorror2005.redirectme.netrrg.uk.comfuckniggers69420911-30770.portmap.hosthwxyl07635.workers.devwww.abvision.cam