############################################################# ## Master list feed of all current C&C domains using DGAs ## ## Feed Provided By: John Bambenek of Bambenek Consulting ## jcb@bambenekconsulting.com // http://bambenekconsulting.com ## ############################################################# This feed is merely an aggregate of the other "IP" feeds of active and non-sinkholed C&C servers. The high-confidence only version of these feed can be accessed by using c2-ipmaster-high.txt. The current list of supported families is here: http://osint.bambenekconsulting.com/feeds/families.txt The CSV is formated as follows: $ip,$description,$manpage IP address MAY be duplicated in those cases where multiple families use the same IP address for a C2. See the respecitve manual pages for how each indicator is generated. This feed is generated every 60 minutes.