46.246.4.12

Classification: Suspicious

46.246.4.12 is a suspicious IP address. Linked to Asyncrat malware. Reported by 5 threat sources, last seen 2025-10-16.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087)

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Vjw0rm	ThreatFox Abuse.ch	2025-10-15 15:03:08	2025-10-16 01:03:10	malicious-activity
AsyncRAT	ThreatFox Abuse.ch	2025-04-07 20:17:04	2025-04-09 19:20:31	malicious-activity	S1087 AsyncRAT
VPN	IPWhois.io	2025-02-22 02:17:12	2025-04-08 06:18:12	anonymization
DCRat	ThreatFox Abuse.ch	2024-06-21 07:19:38	2025-02-24 00:08:32	malicious-activity
NjRAT	ThreatFox Abuse.ch	2023-03-02 15:17:37	2023-03-04 14:18:25	malicious-activity
HTTP Spammer	StopForumSpam.com	2020-11-18 10:39:13	2021-02-12 19:54:39	malicious-activity
Parasite traffic on site gammapharm.com.	Blocklist.net.ua	2021-01-13 10:22:29	2021-01-13 20:24:10	malicious-activity
Anonymizer	Maltiverse	2019-06-30 01:57:08	2019-06-30 01:57:08

Tags

njrat port:2815 bladabindi anonymizer bot abuse dcrat portlane www.portlane.com port:8000 darkcrystal rat as42708 c2 censys glesys rat port:8080 asyncrat port:1000 port:7046 vjw0rm

Whois information

AS name: AS42708 Loxodonta Ab Internet
AS registry: ripencc
AS date: 2011-01-27 00:00:00
AS CIDR: 46.246.0.0/17
CIDR: 46.246.4.0/23
Registrant: Loxodonta Ab Internet
Address: Box 6322 102 35 Stockholm Sweden
City: Stockholm
Postal code: 111 29
Country: SE — Sweden 🇸🇪
Contact email: [email protected]
First indexed: 2019-06-30 01:57:08
Last updated: 2025-10-16 01:03:10

Malicious IPs in the same CIDR

46.246.8.121 46.246.97.3 46.246.106.43 46.246.122.83 46.246.3.226 46.246.8.130 46.246.8.138 46.246.44.53 46.246.84.10 46.246.122.104 46.246.122.76 46.246.3.244 46.246.122.121 46.246.6.66 46.246.4.9 46.246.3.206 46.246.41.155 46.246.41.154 46.246.14.6 46.246.3.234 46.246.3.193 46.246.3.241 46.246.39.245 46.246.6.16 46.246.123.27