malware family
Quasar
284 hosts convicted as Quasar remote-access trojan controllers: 128 still listed, 156 archived. First seen 2026-08-23.
feed checked
TLP:CLEAR
hosts
284
128 still listed
listings
301
networks
109
first seen
2026-08-23
About
Quasar is an open-source remote-access tool for Windows, written in C# and published as remote- administration software by the developer MaxXor: first on GitHub as xRAT in 2014, renamed in 2015. Palo Alto Networks' Unit 42 observed it in attacks on governments in 2016, and MITRE ATT&CK lists state-linked espionage groups among its users. Its server is the operator's console, listening by default on port 4782, and the clients its builder produces connect back to it. Since version 1.4 (2020) they do so over TLS: on first run the operator creates or imports a certificate; the one created is self-signed, RSA-4096, valid until the year 9999 and named Quasar Server CA. Each client carries a copy to check the server against. That certificate identifies the server's listener, never a machine running a client; a modified build may be listed as Quasar-family instead. A listing says nothing about who runs it or why.
Ports
The 8 ports with the most hosts, of 88.
Observed changes
Relabelled: 5 hosts earlier labelled Quasar-family. Only the most recent earlier label is kept.
New networks for this family in this archive, last 7 days: AS209 on 2026-10-26 (1 host); AS52368 on 2026-10-26 (1 host).
Detection packs
Rules for this hub's 128 still-listed hosts, across all 3 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.
Hosts · page 2 of 3
Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.
185.227.144.249QuasarAS50053 · Anton Levinlast confirmed 2026-09-23archived194.76.172.221QuasarAS50053 · Anton Levinlast confirmed 2026-09-23archived138.124.244.170QuasarAS215540 · GLOBAL CONNECTIVITY SOLUTIONS LLPlast confirmed 2026-09-23archived89.185.81.57QuasarAS215540 · GLOBAL CONNECTIVITY SOLUTIONS LLPlast confirmed 2026-09-23archived213.108.23.31QuasarAS210644 · AEZA GROUPlast confirmed 2026-09-23archived96.9.124.208QuasarAS399629 · BL Networkslast confirmed 2026-09-23archived213.109.192.2QuasarAS62005 · BlueVPS OUlast confirmed 2026-09-23archived101.43.30.23QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived85.209.2.41QuasarAS205090 · FIRST SERVERlast confirmed 2026-09-23archived138.124.62.106QuasarAS215540 · GLOBAL CONNECTIVITY SOLUTIONS LLPlast confirmed 2026-09-23archived113.30.152.170QuasarAS215540 · GLOBAL CONNECTIVITY SOLUTIONS LLPlast confirmed 2026-09-23archived62.234.67.66QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived103.229.126.61QuasarAS24544 · Law's Cloud Infrastructurelast confirmed 2026-09-23archived43.137.212.44QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived193.35.227.124QuasarAS62005 · BlueVPS OUlast confirmed 2026-09-23archived43.142.65.166QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived45.148.117.62QuasarAS50053 · Anton Levinlast confirmed 2026-09-23archived193.112.75.177QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived103.219.33.109QuasarAS58461 · No.288,Fu-chun Roadlast confirmed 2026-09-23archived221.207.236.5QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-23archived42.194.141.208QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived61.156.50.96QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-23archived124.220.120.184QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived209.38.22.30QuasarAS14061 · DigitalOceanlast confirmed 2026-09-22archived168.62.223.196QuasarAS8075 · Microsoftlast confirmed 2026-09-22archived139.59.6.27QuasarAS14061 · DigitalOceanlast confirmed 2026-09-23archived138.68.228.126QuasarAS14061 · DigitalOceanlast confirmed 2026-09-22archived104.42.46.96QuasarAS8075 · Microsoftlast confirmed 2026-09-22archived20.160.28.231QuasarAS8075 · Microsoftlast confirmed 2026-09-22archived20.69.123.223QuasarAS8075 · Microsoftlast confirmed 2026-09-22archived20.1.168.66QuasarAS8075 · Microsoftlast confirmed 2026-09-22archived41.41.128.115QuasarAS8452 · IDDQD-ASlast confirmed 2026-09-2849.7.54.75QuasarAS23724 · IDC, China Telecommunicationslast confirmed 2026-09-23archived101.96.253.28QuasarAS137718 · Beijing Volcano Engine Technologylast confirmed 2026-09-23archived93.188.163.199QuasarAS47583 · Hostinger Internationallast confirmed 2026-09-23archived194.147.35.161QuasarAS41745 · Baykov Ilya Sergeevichlast confirmed 2026-09-20archived5.226.55.130QuasarAS931 · Hyonixlast confirmed 2026-09-20archived45.153.34.146QuasarAS197170 · TechTieslast confirmed 2026-10-1131.220.89.57QuasarAS51167 · Contabolast confirmed 2026-10-30208.167.233.7QuasarAS20473 · The Constant Companylast confirmed 2026-09-23archived181.235.13.254QuasarAS3816 · COLOMBIA TELECOMUNICACIONES S.A. ESP…last confirmed 2026-09-25177.2.16.64QuasarAS140227 · Hong Kong Communications Internationa…last confirmed 2026-10-28177.2.16.151QuasarAS140227 · Hong Kong Communications Internationa…last confirmed 2026-10-28211.90.241.34QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-23archived93.122.236.2QuasarAS8953 · Orange Romania S.Alast confirmed 2026-09-23archived109.166.254.219QuasarAS8953 · Orange Romania S.Alast confirmed 2026-09-22archived93.122.209.186QuasarAS8953 · Orange Romania S.Alast confirmed 2026-09-21archived49.235.46.181QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-19archived43.138.195.173QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived107.174.14.102QuasarAS36352 · HostPapalast confirmed 2026-09-23archived1.13.4.137QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived118.195.157.225QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived81.68.213.31QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived45.252.105.141QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-22archived148.72.141.89QuasarAS30083 · velia.netlast confirmed 2026-09-23archived106.52.30.165QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived81.219.53.132QuasarAS12741 · Netia SAlast confirmed 2026-09-23archived101.125.2.18QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-18archived115.159.66.234QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived116.162.222.26QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-18archived118.25.146.24QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived104.193.182.102QuasarAS199610 · marbislast confirmed 2026-09-21archived104.193.182.99QuasarAS199610 · marbislast confirmed 2026-09-21archived31.214.162.61QuasarAS199610 · marbislast confirmed 2026-09-23archived104.193.182.103QuasarAS199610 · marbislast confirmed 2026-09-21archived104.193.182.104QuasarAS199610 · marbislast confirmed 2026-09-21archived111.231.8.221QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived43.139.239.198QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-22archived119.29.221.188QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived46.235.168.54QuasarAS13009 · Redcentric Solutionslast confirmed 2026-09-23archived77.92.144.251QuasarAS214854 · VULUT BILISIM TEKNOLOJILERI LIMITED S…last confirmed 2026-10-28175.178.255.222QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived123.207.184.18QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived150.158.83.250QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived121.4.16.100QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23archived124.163.203.243QuasarAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-18archived154.23.189.222QuasarAS140227 · Hong Kong Communications Internationa…last confirmed 2026-09-233.31.209.215QuasarAS8987 · Amazonlast confirmed 2026-09-20archived43.169.13.161QuasarAS139341 · ACElast confirmed 2026-09-23archived156.254.6.103QuasarAS55933 · Cloudielast confirmed 2026-09-12archived177.92.82.99QuasarAS17222 · MUNDIVOX DO BRASIL LTDAlast confirmed 2026-09-23archived46.235.168.58QuasarAS13009 · Redcentric Solutionslast confirmed 2026-09-23archived45.84.1.14QuasarAS33993 · UFO Hostinglast confirmed 2026-09-23archived20.245.10.22QuasarAS8075 · Microsoftlast confirmed 2026-09-23archived192.3.136.229QuasarAS36352 · HostPapalast confirmed 2026-09-16114.132.227.144QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-19archived119.3.85.18QuasarAS55990 · Huawei Cloud Service data centerlast confirmed 2026-09-21archived172.94.18.198QuasarAS9009 · M247 Europelast confirmed 2026-10-30111.229.4.108QuasarAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-22archived37.114.46.118QuasarAS58087 · Florian Kolblast confirmed 2026-09-1020.218.121.193QuasarAS8075 · Microsoftlast confirmed 2026-09-22120.26.136.167QuasarAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3013.143.139.233QuasarAS207513 · LLC "HOSTOFF CSL"last confirmed 2026-09-15archived95.214.53.90QuasarAS201814 · MEVSPACE sp. z o.olast confirmed 2026-09-21172.94.32.132QuasarAS9009 · M247 Europelast confirmed 2026-09-14192.162.199.75QuasarAS214351 · FEMO IT SOLUTIONSlast confirmed 2026-10-05185.198.58.107QuasarAS60117 · Host Sailorlast confirmed 2026-10-28103.89.13.21QuasarAS36007 · Kamateralast confirmed 2026-09-17archived103.106.67.96QuasarAS46475 · Limestone Networkslast confirmed 2026-10-3071.201.61.136QuasarAS7922 · Comcast Cable Communicationslast confirmed 2026-10-25
Listed in error?
These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.