network

AS401696

40 hosts on this network in this archive, 40 still listed. First seen 2026-08-24.

feed checked TLP:CLEAR
hosts 40 40 still listed
listings 59
families 9
first seen 2026-08-24

About

AS401696 is registered to COGNETCLOUD. Spamhaus ASN-DROP has listed this network since at least 2026-05-24. Listings come from those parties' published lists and are shown only while the scanner still reports them. A network appears here because addresses it routes were listed, almost always for tenant activity on rented or compromised machines, not for anything the operator did. Large hosting providers appear because they are large.

Ports

:44310:807:313375:80844:88884:74433:560013:560023

The 8 ports with the most hosts, of 26.

Detection packs

Rules for this hub's 40 still-listed hosts, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Hosts

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

156.238.245.115DarkSwordAS401696 · cognetcloudlast confirmed 2026-10-30154.201.71.69DarkSwordAS401696 · cognetcloudlast confirmed 2026-10-30154.201.68.183DarkSwordAS401696 · cognetcloudlast confirmed 2026-10-30154.12.86.154Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-10-30103.117.136.32Adaptix +1AS401696 · cognetcloudlast confirmed 2026-10-3045.207.219.249SliverAS401696 · cognetcloudlast confirmed 2026-10-3045.207.219.181Mythic +1AS401696 · cognetcloudlast confirmed 2026-10-30103.149.91.234AdaptixAS401696 · cognetcloudlast confirmed 2026-10-22149.88.75.105AdaptixAS401696 · cognetcloudlast confirmed 2026-10-08149.88.65.173AdaptixAS401696 · cognetcloudlast confirmed 2026-10-12103.117.137.230VShellAS401696 · cognetcloudlast confirmed 2026-10-30149.88.73.83Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-10-14149.88.73.76VShellAS401696 · cognetcloudlast confirmed 2026-10-1345.207.219.46Mythic +1AS401696 · cognetcloudlast confirmed 2026-10-30156.238.233.131Adaptix +1AS401696 · cognetcloudlast confirmed 2026-10-1743.251.227.131VShellAS401696 · cognetcloudlast confirmed 2026-09-21103.108.66.160AsyncRATAS401696 · cognetcloudlast confirmed 2026-09-17154.12.80.232DarkSwordAS401696 · cognetcloudlast confirmed 2026-09-17149.88.73.229VShellAS401696 · cognetcloudlast confirmed 2026-10-02103.149.93.150VShellAS401696 · cognetcloudlast confirmed 2026-10-30154.12.83.111Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-30103.73.162.97VShellAS401696 · cognetcloudlast confirmed 2026-10-30154.12.92.28VShellAS401696 · cognetcloudlast confirmed 2026-10-30149.88.73.99VShellAS401696 · cognetcloudlast confirmed 2026-10-08103.97.177.92VShellAS401696 · cognetcloudlast confirmed 2026-10-30156.238.237.103VShellAS401696 · cognetcloudlast confirmed 2026-10-30156.225.18.58Flying EagleAS401696 · cognetcloudlast confirmed 2026-09-11154.201.68.199Flying EagleAS401696 · cognetcloudlast confirmed 2026-09-03154.12.90.160Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-11149.88.73.236Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-11149.88.73.230Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-15149.88.73.101Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-08149.88.73.69Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-30154.12.90.231Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-08-31156.225.18.45Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-09-11154.201.82.108PureRATAS401696 · cognetcloudlast confirmed 2026-09-08154.201.82.106PureRATAS401696 · cognetcloudlast confirmed 2026-09-08154.201.82.105PureRATAS401696 · cognetcloudlast confirmed 2026-09-21103.185.249.13Mythic +1AS401696 · cognetcloudlast confirmed 2026-10-30103.242.12.143Sliver +1AS401696 · cognetcloudlast confirmed 2026-10-30