C2 Tracker identifies Command and Control (C2) framework servers across the Internet using Shodan and Censys scanning data.

The tracked C2 frameworks include:

- Cobalt Strike
- Sliver
- Metasploit
- Havoc
- Brute Ratel
- Posh C2
- And other offensive security frameworks

This feed provides IP addresses of servers identified as hosting C2 infrastructure. It is updated weekly and is useful for blocking outbound connections from compromised hosts to known C2 servers.