198[.]23[.]185[.]81

Posts referencing this indicator

• The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign

  KKaspersky

  Cluster 1 download hosting IP (NOHAVPS LLC, US) serving malicious archives via fileget.loseyourip.com

  2026-07-01