46.246.84.11 Threat Intelligence and Host Information

Aug 30, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 46.246.84.11 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 41/100

Host and Network Information

Tags: alliance, amadey, android, asyncrat, asyncrat link, brazil, cryptbot, date, emmenhtal, first, germany, indonesia, june, lumma stealer, malware, mexico, mozi, paraguay, play ransomware, powershell, quakbot, russia, singapore, slovakia, ukraine, united kingdom, week
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, proxylists_30d

Country: Sweden
Network:
Noticed: 3 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: gotemburgoxm.duckdns.org romanovas.duckdns.org alma27.duckdns.org rafaborre27.duckdns.org sendfiletiahforem.duckdns.org patria.duckdns.org mr24251.duckdns.org chupetines39999.duckdns.org dubay.duckdns.org asegurarasyncrat.4cloud.click clarosecurity-com.duckdns.org newcracker.duckdns.org diciembre24.duckdns.org pradera.duckdns.org 29122021.sytes.net themanwithgrayhat.ddns.net mallow.3utilities.com azuite1.ddns.net 5876.hopto.org derarawfile10.ddns.net billionaire.ddns.net shahzad73.ddns.net matarife.duckdns.org mr1963.duckdns.org berlin777.duckdns.org asy1543.duckdns.org tiagoodiaz.duckdns.org fortuna777.duckdns.org septiembre2022.duckdns.org daddy.linkpc.net nuevosecua.duckdns.org nuevosremcs.duckdns.org system88.duckdns.org ecuadordos.duckdns.org ecuado2021.duckdns.org navidad202223.duckdns.org asas2021.duckdns.org capurgana.duckdns.org medellin2022.duckdns.org iaito.synology.me diosamor27.duckdns.org bendito2714.duckdns.org corricurloon27.duckdns.org update.mcafee-endpoint.com personnels.bdm-sa.fr news.banquealtantique.net windowsupdaters.zapto.org reald27.duckdns.org cooempresasltda1.duckdns.org cooempresasltda104.duckdns.org verdenjj.duckdns.org 120.duckdns.org 7777777777777.duckdns.org mansengco778.ddns.net dpm4vpn.synology.me

Malware Detected on Host

Count: 3 bd989528e2c4ca64c6dfa437d1ba34e3eea0877e540bef8e7fd8c96b3ec17126 6802c19079c21a985288ad3e2bae4881ca3314037711a1427f6b461598833143 353ad7e6e97a800ae060d31a617ca1fe686c196cf19218d8eebe34e6f8f6cc2e

Open Ports Detected

3389 8000 8080

Map

Whois Information

inetnum: 46.246.84.0 - 46.246.85.255
netname: FROOTYNET
geofeed: https://as42708.net/geofeed.csv
country: SE
admin-c: FN2785-RIPE
tech-c: FN2785-RIPE
abuse-c: FN2785-RIPE
status: ASSIGNED PA
mnt-by: MNT-PORTLANE
mnt-by: GLESYS-MNT
mnt-by: OULUDC
created: 2024-02-23T13:01:35Z
last-modified: 2025-07-30T09:35:11Z
role: Frootynet NOC
address: Box 6322
address: 102 35 Stockholm
address: Sweden
nic-hdl: FN2785-RIPE
mnt-by: MNT-FROOTVPN
created: 2016-08-23T11:47:22Z
last-modified: 2016-08-23T12:16:24Z
abuse-mailbox: abuse@frootvpn.com
route: 46.246.0.0/17
descr: Portlane Network
origin: AS42708
mnt-by: GLESYS-MNT
created: 2011-01-27T13:42:49Z
last-modified: 2024-10-15T06:23:36Z

Links to attack logs

Share on: