`list`

Pack: feodotracker · Endpoint: https://gateway.pipeworx.io/feodotracker/mcp

Current C&C blocklist (optional malware-family / status filter).

Parameters

Name	Type	Required	Description
`family`	string	no	e.g. “Dridex”, “Emotet”, “Qakbot”, “TrickBot”
`status`	string	no	e.g. “online”, “offline”
`limit`	number	no	1-5000 (default 500)

Example call

Arguments

{
  "family": "Emotet",
  "status": "online",
  "limit": 500
}

curl

curl -X POST https://gateway.pipeworx.io/feodotracker/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list","arguments":{"family":"Emotet","status":"online","limit":500}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('list', {
  "family": "Emotet",
  "status": "online",
  "limit": 500
});

More examples

{
  "family": "Dridex",
  "limit": 100
}

Response shape

Always returns: total, matches, results

Field	Type	Description
`total`	number	Total number of entries in the blocklist
`matches`	number	Number of entries matching the filter criteria
`results`	array	Filtered blocklist entries up to the limit

Full JSON Schema

{
  "type": "object",
  "properties": {
    "total": {
      "type": "number",
      "description": "Total number of entries in the blocklist"
    },
    "matches": {
      "type": "number",
      "description": "Number of entries matching the filter criteria"
    },
    "results": {
      "type": "array",
      "description": "Filtered blocklist entries up to the limit",
      "items": {
        "type": "object",
        "properties": {
          "ip_address": {
            "type": "string",
            "description": "IP address"
          },
          "port": {
            "type": "number",
            "description": "Port number"
          },
          "status": {
            "type": "string",
            "description": "Status (e.g. online, offline)"
          },
          "hostname": {
            "type": [
              "string",
              "null"
            ],
            "description": "Associated hostname"
          },
          "as_number": {
            "type": "number",
            "description": "Autonomous System number"
          },
          "as_name": {
            "type": "string",
            "description": "Autonomous System name"
          },
          "country": {
            "type": "string",
            "description": "Country code or name"
          },
          "first_seen": {
            "type": "string",
            "description": "ISO timestamp of first observation"
          },
          "last_online": {
            "type": "string",
            "description": "ISO timestamp of last online status"
          },
          "malware": {
            "type": "string",
            "description": "Associated malware family name"
          }
        },
        "required": [
          "ip_address"
        ]
      }
    }
  },
  "required": [
    "total",
    "matches",
    "results"
  ]
}

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "feodotracker": {
      "url": "https://gateway.pipeworx.io/feodotracker/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

list