■■□□□ C2 Tracker: Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking infostealers and botnets as well. It uses Shodan searches to collect the IPs. The most recent collection is always stored in data; the IPs are broken down by tool and there is an all.txt.
https://github.com/montysecurity/C2-Tracker
https://t.me/cKure/13171