Skip to main content

Threat feed

Command & Control (C2) IPs & domains — recent threat feed

Command-and-control servers coordinating infected machines. Aggregated from 100+ threat intelligence sources, refreshed daily.

Malicious IPs

4 878 636

Malicious domains

3 048 515

Last updated

2026-09-05

Downloads are point-in-time snapshots. To consume Command & Control (C2) indicators continuously, pull the STIX/TAXII threat intelligence feed into OpenCTI, MISP, or your own pipeline.

Recently listed IPs

Recently listed domains

Other threat categories