Hi,
just for the sake of completeness: If you are using the IPS, at least the ET community ruleset contains the C&C servers tracked by FeodoTracker:
True, this is a rather costly way to block things, but at least you are safe from these C&C servers without leaving IPFire’s web interface. 
Thanks, and best regards,
Peter Müller