C2 Host Feed

post

https://api.hudsonrock.com/json/v3/threat-feeds/c2

Cursor-paginated, filterable, multi-sortable feed of infostealer C2 host rows (one row per host per UTC day). Requires the c2 api permission. Uses keyset (cursor) pagination: pass pageInfo.nextCursor back as cursor for the next page; the cursor is bound to its sort/dir/filters. Filters are optional and AND-combined; dateFrom/dateTo take precedence over date.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Required Permissions

c2_threat_feed

Response Limits

Rate limit: 50 requests per 10 seconds
Maximum items per page: 200 hosts
Default items per page: 50 hosts
Maximum response time: 90 seconds

Body Params

date

string

A single UTC day (YYYY-MM-DD). Ignored if a range is given.

dateFrom

string

Inclusive range start on dayUtc.

dateTo

string

Inclusive range end on dayUtc.

host

string

Exact host match (lower-cased, trimmed).

family

string

Malware family membership (lower-cased).

country

string

ISO-2 country, exact (upper-cased).

feedType

string

reviewStatus

string

asn

integer

Autonomous system number.

sort

string

enum

Defaults to date

date = dayUtc, seen = seenAtDate (nulls excluded), host = host.

Allowed:

dir

string

enum

Defaults to desc

Allowed:

cursor

string

Opaque keyset cursor from a previous response's pageInfo.nextCursor. Omit for the first page. Must match the sort/dir it was issued for (else 400).

limit

integer

1 to 200

Defaults to 50

Rows per page. Clamped to [1, 200].

withTotal

boolean

Defaults to false

When true, also compute pageInfo.total via a full count over the filter. Expensive — avoid unless needed.

Responses

500

Internal server error.

Required Permissions

Response Limits

200Successful operation

400Validation error — malformed date, unknown sort/dir, or a cursor that does not match the requested sort.

401Missing or invalid api-key.

403The API key lacks the required permission for this feed.