79.110.49.186
Classification: Malicious
79.110.49.186 is a malicious IP address. Linked to Cobalt Strike malware. Reported by 4 threat sources, last seen 2026-08-05.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Cobalt Strike | ThreatFox Abuse.ch | 2026-08-04 11:47:25 | 2026-08-05 12:25:05 | botnet malicious-activity | S0154 Cobalt Strike |
| Suspicious Host | AbuseIPDB | 2024-07-29 14:40:09 | 2026-03-13 15:14:38 | anomalous-activity | |
| Mail Spammer | Abuseat.org | 2023-07-30 05:04:59 | 2023-07-30 05:04:59 | ||
| Bruteforce | Blocklist.net.ua | 2023-07-30 05:04:57 | 2023-07-30 05:04:57 | malicious-activity |
Tags
abuse agentemis beacon port:443 drb-ra cobeacon cobaltstrike port:80 port:3389 port:8080Whois information
- AS name
- AS399486 Virtuo Networks France SAS
- AS registry
- ripencc
- AS date
- 2018-08-10 00:00:00
- AS CIDR
- 79.110.49.0/24
- CIDR
- 79.110.49.0/24
- Registrant
- Virtuo Networks France SAS
- Address
- 8 THE GREEN, STE A DOVER DE 19901 United States
- City
- Paris
- Postal code
- 75004
- Country
- FR — France 🇫🇷
- First indexed
- 2023-07-30 05:04:57
- Last updated
- 2026-08-05 12:25:05