146.59.229.66
Classification: Malicious
146.59.229.66 is a malicious IP address. Linked to Ninja malware. Reported by 4 threat sources, last seen 2026-09-07. Network: AS16276 OVH SAS.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: NINJA (S1100)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-09-07 13:13:18 | 2026-09-07 13:13:18 | anonymization vpn | |
| Ninja | Maltiverse Threat Observatory | 2026-06-24 21:16:30 | 2026-08-25 09:45:58 | anomalous-activity anonymization botnet malicious-activity | S1100 Ninja |
| Proxy | FireHOL | 2023-01-02 03:01:44 | 2023-07-05 18:46:30 | anonymization | |
| HTTP Spammer | StopForumSpam.com | 2022-07-25 04:06:27 | 2022-07-25 04:06:27 | malicious-activity |
Tags
anonymization bot abuse port:11185Whois information
- AS name
- AS16276 OVH SAS
- AS registry
- ripencc
- AS date
- 1994-03-08 00:00:00
- AS CIDR
- 146.59.0.0/16
- CIDR
- 146.59.228.0/22
- Registrant
- OVH SAS
- Address
- 2 rue Kellermann 59100 Roubaix FRANCE
- City
- Gravelines
- Postal code
- 59820
- Country
- FR — France 🇫🇷
- Contact email
- [email protected]
- First indexed
- 2022-07-25 04:06:27
- Last updated
- 2026-09-07 13:13:19
Malicious IPs in the same CIDR
146.59.197.114 146.59.136.90 146.59.231.4 146.59.229.66 146.59.147.182 146.59.192.250 146.59.150.209 146.59.207.132 146.59.148.192