46.246.14.14
Classification: Suspicious
46.246.14.14 is a suspicious IP address. Linked to Njrat, Asyncrat malware. Reported by 5 threat sources, last seen 2025-12-12.
MITRE ATT&CK associations
Malware families: NJRAT (S0385) ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-12-12 16:49:41 | 2025-12-12 16:49:41 | anonymization | |
| DCRat | ThreatFox Abuse.ch | 2024-12-12 20:17:16 | 2024-12-14 19:19:31 | malicious-activity | |
| AsyncRAT | ThreatFox Abuse.ch | 2024-06-18 07:18:55 | 2024-06-20 06:22:06 | malicious-activity | S1087 AsyncRAT |
| NjRAT | ThreatFox Abuse.ch | 2023-12-06 16:17:04 | 2023-12-08 15:18:32 | malicious-activity | S0385 njRAT |
| Parasite SEO | Blocklist.net.ua | 2020-08-01 04:08:43 | 2020-08-01 09:54:10 | ||
| Anonymizer | Maltiverse | 2019-04-18 08:46:41 | 2019-04-18 08:46:41 | ||
| HTTP Spammer | StopForumSpam.com | 2019-04-12 09:06:31 | 2019-04-12 09:06:31 |
Tags
bot abuse anonymizer njrat port:2054 bladabindi lime-worm asyncrat portlane www.portlane.com port:2000 as42708 c2 censys dcrat portlane rat port:5000 darkcrystal ratWhois information
- AS name
- AS42708 Loxodonta Ab Internet
- AS registry
- ripencc
- AS date
- 2011-01-27 00:00:00
- AS CIDR
- 46.246.0.0/17
- Registrant
- Loxodonta Ab Internet
- City
- Stockholm
- Postal code
- 111 29
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2019-04-12 09:06:31
- Last updated
- 2025-12-12 16:49:44
Malicious IPs in the same CIDR
46.246.4.15 46.246.8.121 46.246.97.3 46.246.106.43 46.246.122.83 46.246.3.226 46.246.8.130 46.246.8.138 46.246.44.53 46.246.84.10 46.246.122.104 46.246.122.76 46.246.3.244 46.246.122.121 46.246.6.66 46.246.4.9 46.246.3.206 46.246.41.155 46.246.41.154 46.246.14.6 46.246.3.234 46.246.3.193 46.246.3.241 46.246.39.245 46.246.6.16