Master Feeds
Use of these feeds governed by this license.


ALL FAMILIES

C2 IP Feed

C2 Domain Feed

C2 All Indicator Feed

DGA Domain Feed

HIGH-CONFIDENCE FAMILIES ONLY

High-Confidence C2 IP Feed

High-Confidence C2 Domain Feed

High-Confidence C2 All Indicator Feed

High-Confidence DGA Domain Feed

High-Confidence DGA Domain Feed ZIP File

Family-Specific Feeds

Bamital (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Banjori (FP Risk: Medium - Some short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Bebloh/URLZone (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Bedep (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Beebone (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Chinad (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Corebot (FP Risk: Low) | Master | Domlist | IP List | NS Host List (NOT GENERATED) | NS IP List (NOT GENERATED)

Cryptolocker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dircrypt (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dromedan (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dyre (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Fobber (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

G01 (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Geodo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Gozi (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Hesperbot (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Kraken (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Locky (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Madmax (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Matsnu (FP Risk: High - Wordlist based) | Master | Domlist | IP List | NS Host List | NS IP List

Murofet (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Necurs (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Nymaim (FP Risk: Medium - Short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

P2P GOZ (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pandabanker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

PT GOZ / New GOZ (FP Risk: Low) | Master | Domlist | NS Host List | NS IP List

Padcrypt (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pizd (FP Risk: High) | Master | Domlist | IP List | NS Host List | NS IP List

Proslikefan (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pushdo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pykspa (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Qadars (FP Risk: Low | Master | Domlist | IP List | NS Host List | NS IP List

Qakbot (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ramdo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ramnit (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ranbyus (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Shifu (FP Risk: Medium) | Master | Domlist | IP List | NS Host List | NS IP List

Simda (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Sisron (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Sphinx (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Suppobox (FP Risk: High - wordlist based) | Master | Domlist | IP List | NS Host List | NS IP List

Symmi (FP Risk: Low) | Master | Domlist | IP List | NS Host List (NOT GENERATED) | NS IP List (NOT GENERATED)

Tempedreve (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Tinba / TinyBanker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Unknowndropper (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Unknownjs (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Vawtrak (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Vidro (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Virut (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Volatile Cedar / Explosive (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List