46.246.4.11

Classification: Suspicious

46.246.4.11 is a suspicious IP address. Linked to Dcrat, Asyncrat malware. Reported by 7 threat sources, last seen 2026-08-18. Network: AS42708 Glesys AB.

Current activity

  • VPN node β€” Provides anonymization that can hide an attacker.

MITRE ATT&CK associations

Malware families: DCRAT (S9017) ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2024-12-23 08:00:16 2026-08-18 17:23:04 anonymization vpn
AsyncRAT ThreatFox Abuse.ch 2025-08-25 23:18:35 2025-08-27 22:19:12 malicious-activity S1087 AsyncRAT
DCRat ThreatFox Abuse.ch 2024-03-01 07:17:03 2025-03-07 15:29:26 malicious-activity S9017 DCRAT
SSH Attacker Blocklist.de 2023-01-08 02:50:06 2023-01-09 02:49:25 malicious-activity
Malicious Host HoneyDB 2023-01-08 00:00:00 2023-01-08 00:00:00 malicious-activity
Anonymizer Maltiverse Research Team 2021-01-03 21:06:28 2021-02-02 13:39:06 anonymizer
HTTP Spammer StopForumSpam.com 2020-09-05 10:47:33 2020-12-02 19:13:37 malicious-activity
Anonymizer Maltiverse 2020-01-03 08:25:31 2020-01-03 08:25:31

Tags

ssh bruteforce bot anonymizer abuse dcrat portlane www.portlane.com port:6000 darkcrystal rat as42708 c2 censys portlane rat port:5000 glesys port:9000 port:8080 port:2703 asyncrat

Whois information

AS name
AS42708 Glesys AB
AS registry
ripencc
AS date
2011-01-27 00:00:00
AS CIDR
46.246.0.0/17
CIDR
46.246.4.0/23
Registrant
Glesys AB
Address
Box 6322 102 35 Stockholm Sweden
City
Stockholm
Postal code
101 23
Country
SE β€” Sweden πŸ‡ΈπŸ‡ͺ
Contact email
[email protected]
First indexed
2020-01-03 08:25:31
Last updated
2026-08-18 17:23:05

Malicious IPs in the same CIDR

46.246.8.121 46.246.97.3 46.246.106.43 46.246.122.83 46.246.3.226 46.246.8.130 46.246.8.138 46.246.44.53 46.246.84.10 46.246.122.104 46.246.122.76 46.246.3.244 46.246.122.121 46.246.6.66 46.246.4.9 46.246.3.206 46.246.41.155 46.246.41.154 46.246.14.6 46.246.3.234 46.246.3.193 46.246.3.241 46.246.39.245 46.246.6.16 46.246.123.27