46.246.12.15

Classification: Neutral

46.246.12.15 is a neutral IP address. Reported by 4 threat sources, last seen 2025-03-08. Network: AS42708 Loxodonta Ab Internet.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154) NJRAT (S0385)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2025-03-07 12:39:44 2025-03-08 20:31:05 anonymization
DCRat ThreatFox Abuse.ch 2024-09-13 00:17:04 2025-03-08 19:24:36 malicious-activity
VPN IPWhois.io 2025-01-16 11:48:20 2025-03-07 09:21:48 anonymization
NjRAT ThreatFox Abuse.ch 2024-01-08 02:17:02 2024-01-10 01:19:53 malicious-activity S0385 njRAT
Proxy FireHOL 2023-09-15 11:23:20 2023-10-08 11:56:32 anonymization
Cobalt Strike ThreatFox Abuse.ch 2022-08-11 02:19:36 2022-08-11 02:19:36 malicious-activity S0154 Cobalt Strike
Anonymizer Maltiverse 2019-06-18 02:06:42 2019-06-18 02:06:42

Tags

anonymization cobaltstrike hetzner-as agentemis beacon cobeacon anonymizer njrat port:2054 bladabindi lime-worm as42708 c2 censys portlane rat port:5000 darkcrystal rat dcrat glesys port:8080

Whois information

AS name
AS42708 Loxodonta Ab Internet
AS registry
ripencc
AS date
2011-01-27 00:00:00
AS CIDR
46.246.0.0/17
Registrant
Loxodonta Ab Internet
City
Stockholm
Postal code
111 29
Country
SE — Sweden 🇸🇪
First indexed
2019-06-18 02:06:42
Last updated
2025-03-09 04:46:57

Malicious IPs in the same CIDR

46.246.4.15 46.246.8.121 46.246.97.3 46.246.106.43 46.246.122.83 46.246.3.226 46.246.8.130 46.246.8.138 46.246.44.53 46.246.84.10 46.246.122.104 46.246.122.76 46.246.3.244 46.246.122.121 46.246.6.66 46.246.4.9 46.246.3.206 46.246.41.155 46.246.41.154 46.246.14.6 46.246.3.234 46.246.3.193 46.246.3.241 46.246.39.245 46.246.6.16