# ThreatCluster public IOC feed
# Generated: 2026-06-03T12:58:41Z UTC
# High-confidence IOCs from the last 30 days (domains, IPv4, IPv6).
# Source: https://threatcluster.io/iocs
# False-positive reports: hello@threatcluster.io
# Count: 96
#
riggletoy.ru
systemupdate.app
49.207.56.74
185.235.137.106
216.9.224.26
minemine.gleeze.com
alibaba.xyz
byte-io.us
cloud-sync.online
windows.driver-store.com
5d14vnfb.space
jeaw520i.space
qdmagva5.space
r7mvjl67.space
zgj1tam9.space
107.172.212.235
217.69.3.218
77.83.39.211
216.126.225.129
claudecode.co.com
claude-setup.com
geminicli.co.com
gemini-setup.com
ransomed.vc
1vpns.com
1vpns.net
1vpns.org
runner.bw
l1ewsu3yjkqeroy.xyz
mamont.jo
attacker-host.com
proxy.ae
check.git-service.com
artemislab.cc
87.96.21.84
triada.ag
20.17.161.118
nats.io
mickeymousegamesdealer.al
trojandropper.fr
45.192.109.25
154.223.58.142
kro.kr
morames.r-e.kr
n-e.kr
opedromos1.r-e.kr
o-r.kr
p-e.kr
r-e.kr
agent.bi
dropper.agent.gi
gov-iq.net
runner.ec
runner.lk
webshell.se
83.142.209.194
cloudservbr.com
infra-telemetry.com
155.133.27.198
159.65.202.204
165.22.184.26
167.148.195.53
167.172.38.123
209.99.185.221
209.99.185.223
62.171.185.97
tronfind-api.tronfindexplorer.com
trx-scan-explorer.org
legitserver.theworkpc.com
45.138.16.64
onmicrosoft.com
yourcornpany.com
micro-soft.com
bskke4.dnslog.cn
dnslog.cn
111.90.145.139
203.10.98.186
38.147.173.172
92.208.115.60
dns-providersa2.com
forest-entityl.cc
backward.so
terminate.so
grantallarddata.com
hosted-by.yeezyhost.net
kvk-blank-login.mediainsightsgroup.com
leatherupcorp.com
mediainsightsgroup.com
77.91.68.141
1980food.co
cndsoft.co
colorncopy.co
sqgame.com
swr.co
47.83.8.198
notepad-plus-plus-mac.org