← Back to feed

Subnet 62.133.46.0/24

SUBNET Ended high
Why this campaign was detected
3 IPs from the same /24 subnet (62.133.46.0/24) were observed attacking our sensors within the same time window. All belong to M247 Europe SRL (AS9009). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS9009 · M247 Europe SRL
Subnet
62.133.46.0/24
Country
🇮🇷 IR
Cloud Provider
Member Count
3 IPs
Below average
Total Events
4
Below average by volume
Started / Ended
2026-06-25 06:48 — 2026-08-09 14:30
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
62.133.46.12 web_probe 14% VPN 2 1 http:scan 2026-06-26 21:35 evidence →
62.133.46.7 http:scan 9% VPN 1 1 http:scan 2026-07-03 13:49 evidence →
62.133.46.30 http:scan 9% VPN 1 1 http:scan 2026-07-02 13:50 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}