A
licenseA
qualityD
maintenanceMCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
Last updated
7
169
144
MIT
mcp-feodotracker
by pipeworx-io
Provides tools to query the Feodo Tracker botnet C&C IP blocklist from abuse.ch, allowing AI agents to check IP addresses, list current blocklists, and retrieve recent or aggressive blocklist entries.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-feodotrackercheck IP 1.2.3.4"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-feodotracker
Feodo Tracker MCP — botnet C&C IP blocklist from abuse.ch.
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
Tools
Tool | Description |
| Current C&C blocklist (optional malware-family / status filter). |
| Check whether a given IPv4 is on the current blocklist. |
| Blocklist entries first seen in the last N hours. |
| Full aggressive blocklist (includes older + lower-confidence IPs). |
Related MCP server: Threat Intelligence MCP Server
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"feodotracker": {
"url": "https://gateway.pipeworx.io/feodotracker/mcp"
}
}
}Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Feodotracker data" })The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
This server cannot be installed
Maintenance
–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityCmaintenanceAggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.Last updated11188MIT
- AlicenseAqualityDmaintenanceMCP server providing DNS resolution, reverse DNS, RDAP-based WHOIS, and IP geolocation lookups. No API keys required , and all upstreams are public.Last updated4MIT
- AlicenseAqualityBmaintenanceMCP server for live IP and domain reputation checks via DNS lookups, providing abuse scores and network type without requiring an API key.Last updated2MIT
Related MCP Connectors
ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)
AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)
Free IPv4 lookups against a distributed attacker-observation corpus.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-feodotracker'
If you have feedback or need assistance with the MCP directory API, please join our Discord server