46.246.14.21
Classification: Malicious
46.246.14.21 is a malicious IP address in Stockholm, SE. Linked to Dcrat, Asyncrat malware. 105 sightings from 3 threat sources (VPN), last seen 2026-10-09.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: DCRAT (S9017) ASYNCRAT (S1087) REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-08-28 15:01:36 | 2026-10-09 23:08:05 | anonymization vpn | |
| Remcos | ThreatFox Abuse.ch | 2026-10-07 03:31:03 | 2026-10-07 04:25:05 | botnet malicious-activity | S0332 Remcos |
| Asyncrat | Maltrail | 2025-03-27 14:07:55 | 2025-03-27 14:07:55 | malicious-activity | S1087 AsyncRAT |
| DCRat | ThreatFox Abuse.ch | 2024-06-08 07:18:31 | 2024-08-17 01:24:42 | malicious-activity | S9017 DCRAT |
Tags
dcrat portlane www.portlane.com port:9000 darkcrystal rat as42708 c2 censys rat port:9090 portlane port:8000 socmer nmuonapuapu remvio remcosrat port:5987 remcosWhois information
- AS name
- AS42708 Glesys AB
- AS registry
- ripencc
- AS date
- 2011-01-27 00:00:00
- AS CIDR
- 46.246.0.0/17
- Registrant
- Glesys AB
- City
- Stockholm
- Postal code
- 117 56
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2024-06-08 07:18:31
- Last updated
- 2026-10-09 23:08:06
Malicious IPs in the same CIDR
46.246.8.177 46.246.84.11 46.246.6.3 46.246.41.154 46.246.6.8 46.246.12.11 46.246.41.155 46.246.3.206 46.246.3.226 46.246.8.130 46.246.44.53 46.246.12.13 46.246.12.8 46.246.12.18 46.246.39.245 46.246.8.176 46.246.123.6 46.246.6.15 46.246.97.3 46.246.84.3 46.246.6.17 46.246.4.15 46.246.84.14 46.246.14.21 46.246.12.24