46.246.12.19
Classification: Suspicious
46.246.12.19 is a suspicious IP address. Linked to Dcrat, Njrat malware. Reported by 5 threat sources, last seen 2026-08-21. Network: AS42708 Glesys AB.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: DCRAT (S9017) NJRAT (S0385) ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-07-18 10:22:45 | 2026-08-21 21:20:46 | anonymization vpn | |
| AsyncRAT | ThreatFox Abuse.ch | 2026-07-18 09:46:23 | 2026-07-18 10:25:04 | malicious-activity | S1087 AsyncRAT |
| Asyncrat | Maltrail | 2025-03-27 14:07:55 | 2025-03-27 14:07:55 | malicious-activity | S1087 AsyncRAT |
| NjRAT | ThreatFox Abuse.ch | 2024-08-15 04:17:07 | 2024-08-17 03:22:44 | malicious-activity | S0385 njRAT |
| DCRat | ThreatFox Abuse.ch | 2024-06-18 07:18:56 | 2024-08-17 01:24:41 | malicious-activity | S9017 DCRAT |
| Proxy | FireHOL | 2024-05-20 22:17:57 | 2024-06-17 15:00:19 | anonymization | |
| Anonymizer | Maltiverse | 2019-06-28 09:46:45 | 2019-06-28 09:46:45 |
Tags
anonymizer anonymization dcrat portlane www.portlane.com port:8000 darkcrystal rat as42708 c2 censys rat port:5000 njrat port:3100 bladabindi lime-worm portlane port:2000 port:2703 asyncrat drb-raWhois information
- AS name
- AS42708 Glesys AB
- AS registry
- ripencc
- AS date
- 2011-01-27 00:00:00
- AS CIDR
- 46.246.0.0/17
- Registrant
- Glesys AB
- City
- Stockholm
- Postal code
- 101 23
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2019-06-28 09:46:45
- Last updated
- 2026-08-21 21:20:47
Malicious IPs in the same CIDR
46.246.4.15 46.246.8.121 46.246.97.3 46.246.106.43 46.246.122.83 46.246.3.226 46.246.8.130 46.246.8.138 46.246.44.53 46.246.84.10 46.246.122.104 46.246.122.76 46.246.3.244 46.246.122.121 46.246.6.66 46.246.4.9 46.246.3.206 46.246.41.155 46.246.41.154 46.246.14.6 46.246.3.234 46.246.3.193 46.246.3.241 46.246.39.245 46.246.6.16